dnscrypt-proxy.toml 1.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162
  1. listen_addresses = ['127.0.0.1:54']
  2. max_clients = 250
  3. ipv4_servers = true
  4. ipv6_servers = false
  5. dnscrypt_servers = true
  6. doh_servers = true
  7. require_dnssec = true
  8. require_nolog = true
  9. require_nofilter = true
  10. disabled_server_names = []
  11. force_tcp = false
  12. timeout = 5000
  13. keepalive = 30
  14. log_level = 2
  15. log_file = '/var/log/dnscrypt-proxy/dnscrypt-proxy.log'
  16. log_files_max_size = 10
  17. log_files_max_age = 7
  18. log_file_latest = true
  19. log_files_max_backups = 1
  20. use_syslog = false
  21. cert_refresh_delay = 240
  22. bootstrap_resolvers = ['94.16.114.254:53']
  23. ignore_system_dns = true
  24. netprobe_timeout = 60
  25. netprobe_address = '94.16.114.254:53'
  26. block_ipv6 = false
  27. block_unqualified = true
  28. block_undelegated = true
  29. reject_ttl = 600
  30. cloaking_rules = '/etc/dnscrypt-proxy/cloaking-rules.txt'
  31. cache = true
  32. cache_size = 4096
  33. cache_min_ttl = 2400
  34. cache_max_ttl = 86400
  35. cache_neg_min_ttl = 60
  36. cache_neg_max_ttl = 600
  37. [blocked_names]
  38. blocked_names_file = '/etc/dnscrypt-proxy/blocklist.txt'
  39. [sources]
  40. [sources.'public-resolvers']
  41. urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
  42. cache_file = '/var/cache/dnscrypt-proxy/public-resolvers.md'
  43. minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
  44. prefix = ''
  45. [sources.'relays']
  46. urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/relays.md', 'https://download.dnscrypt.info/resolvers-list/v3/relays.md']
  47. cache_file = '/var/cache/dnscrypt-proxy/relays.md'
  48. minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
  49. refresh_delay = 72
  50. prefix = ''
  51. [broken_implementations]
  52. fragments_blocked = ['cisco', 'cisco-ipv6', 'cisco-familyshield', 'cisco-familyshield-ipv6', 'cleanbrowsing-adult', 'cleanbrowsing-adult-ipv6', 'cleanbrowsing-family', 'cleanbrowsing-family-ipv6', 'cleanbrowsing-security', 'cleanbrowsing-security-ipv6']