64649039d9
- General improvements
- Parallel download of only needed files at start
- Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.)
- Simplified Docker final image
- Faster bootup
- DNS over TLS
- Finer grain blocking at DNS level: malicious, ads and surveillance
- Choose your DNS over TLS providers
- Ability to use multiple DNS over TLS providers for DNS split horizon
- Environment variables for DNS logging
- DNS block lists needed are downloaded and built automatically at start, in parallel
- PIA
- A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR)
- Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR)
40 lines
905 B
YAML
40 lines
905 B
YAML
version: "3.7"
|
|
services:
|
|
pia:
|
|
build: https://github.com/qdm12/private-internet-access-docker.git
|
|
image: qmcgaw/private-internet-access
|
|
container_name: pia
|
|
cap_add:
|
|
- NET_ADMIN
|
|
devices:
|
|
- /dev/net/tun
|
|
network_mode: bridge
|
|
init: true
|
|
ports:
|
|
- 8888:8888/tcp
|
|
- 8388:8388/tcp
|
|
- 8388:8388/udp
|
|
# command:
|
|
environment:
|
|
- USER=js89ds7
|
|
- PASSWORD=8fd9s239G
|
|
- ENCRYPTION=strong
|
|
- PROTOCOL=udp
|
|
- REGION=CA Montreal
|
|
- DOT=on
|
|
- DOT_PROVIDERS=cloudflare
|
|
- BLOCK_MALICIOUS=on
|
|
- BLOCK_SURVEILLANCE=off
|
|
- BLOCK_ADS=off
|
|
- UNBLOCK=
|
|
- EXTRA_SUBNETS=
|
|
- TINYPROXY=off
|
|
- TINYPROXY_LOG=Info
|
|
- TINYPROXY_USER=
|
|
- TINYPROXY_PASSWORD=
|
|
- SHADOWSOCKS=off
|
|
- SHADOWSOCKS_LOG=on
|
|
- SHADOWSOCKS_PORT=8388
|
|
- SHADOWSOCKS_PASSWORD=
|
|
restart: always
|