diff options
Diffstat (limited to 'community/dnscrypt-proxy/config-full-paths.patch')
| -rw-r--r-- | community/dnscrypt-proxy/config-full-paths.patch | 30 |
1 files changed, 16 insertions, 14 deletions
diff --git a/community/dnscrypt-proxy/config-full-paths.patch b/community/dnscrypt-proxy/config-full-paths.patch index 1af5089c52..b5c0d773bb 100644 --- a/community/dnscrypt-proxy/config-full-paths.patch +++ b/community/dnscrypt-proxy/config-full-paths.patch @@ -1,9 +1,9 @@ diff --git a/./dnscrypt-proxy.toml b/dnscrypt-proxy/dnscrypt-proxy.toml new file mode 100644 -index 0000000..736ec29 +index 0000000..6f4282a --- /dev/null +++ b/dnscrypt-proxy/dnscrypt-proxy.toml -@@ -0,0 +1,628 @@ +@@ -0,0 +1,678 @@ + +############################################## +# # @@ -189,21 +189,23 @@ index 0000000..736ec29 +# tls_cipher_suite = [52392, 49199] + + -+## Fallback resolver -+## This is a normal, non-encrypted DNS resolver, that will be only used ++## Fallback resolvers ++## These are normal, non-encrypted DNS resolvers, that will be only used +## for one-shot queries when retrieving the initial resolvers list, and +## only if the system DNS configuration doesn't work. -+## No user application queries will ever be leaked through this resolver, -+## and it will not be used after IP addresses of resolvers URLs have been found. -+## It will never be used if lists have already been cached, and if stamps ++## No user application queries will ever be leaked through these resolvers, ++## and they will not be used after IP addresses of resolvers URLs have been found. ++## They will never be used if lists have already been cached, and if stamps +## don't include host names without IP addresses. -+## It will not be used if the configured system DNS works. -+## A resolver supporting DNSSEC is recommended. ++## They will not be used if the configured system DNS works. ++## Resolver supporting DNSSEC are recommended. +## +## People in China may need to use 114.114.114.114:53 here. +## Other popular options include 8.8.8.8 and 1.1.1.1. ++## ++## If more than one resolver are specified, they will be tried in sequence. + -+fallback_resolver = '9.9.9.9:53' ++fallback_resolvers = ['9.9.9.9:53', '8.8.8.8:53'] + + +## Always use the fallback resolver before the system DNS settings. @@ -337,7 +339,7 @@ index 0000000..736ec29 + +## Cache size + -+cache_size = 1024 ++cache_size = 4096 + + +## Minimum TTL for cached entries @@ -369,7 +371,7 @@ index 0000000..736ec29 + +## dnscrypt-proxy can act as a local DoH server. By doing so, web browsers +## requiring a direct connection to a DoH server in order to enable some -+## features will enable these, without bypassing your DNS proxy.. ++## features will enable these, without bypassing your DNS proxy. + +## Addresses that the local DoH server should listen to + @@ -385,7 +387,7 @@ index 0000000..736ec29 + + +## Certificate file and key - Note that the certificate has to be trusted. -+## See the Wiki for more information. ++## See the documentation (wiki) for more information. + +# cert_file = "localhost.pem" +# cert_key_file = "localhost.pem" @@ -401,7 +403,7 @@ index 0000000..736ec29 +[query_log] + + ## Path to the query log file (absolute, or relative to the same directory as the config file) -+ ## Can be /dev/stdout to log to the standard output (and set log_files_max_size to 0) ++ ## Non non-Windows systems, can be /dev/stdout to log to the standard output (and set log_files_max_size to 0) + + # file = '/var/log/dnscrypt-proxy/query.log' + |