diff options
Diffstat (limited to 'community/dnscrypt-proxy')
| -rw-r--r-- | community/dnscrypt-proxy/APKBUILD | 9 | ||||
| -rw-r--r-- | community/dnscrypt-proxy/config-full-paths.patch | 34 |
2 files changed, 33 insertions, 10 deletions
diff --git a/community/dnscrypt-proxy/APKBUILD b/community/dnscrypt-proxy/APKBUILD index 29f7178ba2..42574c1317 100644 --- a/community/dnscrypt-proxy/APKBUILD +++ b/community/dnscrypt-proxy/APKBUILD @@ -1,7 +1,7 @@ # Contributor: Ian Bashford <ianbashford@gmail.com> # Maintainer: Ian Bashford <ianbashford@gmail.com> pkgname=dnscrypt-proxy -pkgver=2.0.19 +pkgver=2.0.21 pkgrel=0 pkgdesc="A tool for securing communications between a client and a DNS resolver" url="https://dnscrypt.info" @@ -25,13 +25,12 @@ options="!check" prepare() { default_prepare cd "$builddir" - export GOPATH=$(pwd) ln -sf vendor src } build() { cd "$builddir"/"$pkgname" - GOPATH="$builddir" go build -ldflags="-s -w" -v + go build -ldflags="-s -w" -v } package() { @@ -55,8 +54,8 @@ setup() { install -m755 -D "$srcdir"/$pkgname.setup "$subpkgdir"/usr/sbin/setup-dnscrypt } -sha512sums="4501a64717c0f2a9313e9328340e466c9ec325d09ef548f6af9a7855ff3497fb741269a17b397a36e2a120519820378e9f98a6a768a3678ea8144ee4690364f6 dnscrypt-proxy-2.0.19.tar.gz +sha512sums="e01869b963ef7454f9136d8ececc4e541dae489524e03cc2906fc3b661281bd6ebf5ef8b6dc29a6bcc1dabb638b9e74200b3ed48ebcd69cd3306e8bab5dd248a dnscrypt-proxy-2.0.21.tar.gz e0a72d39d47dc24b889d08beedbd9fdf21615f42fbab79980debdfd2c3feaa83dc3f776351f7dd13533cc85905ce4e01812e4ff8a80a9ccc0b21e9db7d6cb232 dnscrypt-proxy.initd c001ae39da1b2db71764cab568f9ed18e4de0cea3d1a4e7bd6dd01a5668b81a888ea9eef99de6beac08857ad7f8eb1a32d730e946ac3563e4dcfa27147e35052 dnscrypt-proxy.confd 66dd43d84117a0151ae41f34d82b716760382a5a491424bf6418228ffd21f0dfbc88e34cc5074e11f97f006335d97b85367bb9ab1d96747a48e893c022ad52d0 dnscrypt-proxy.setup -31e02083f9b246ab7a41c5d2951dd00e2ba280c4154fe345022da8401ff937de53d4ace48835140a059995f0dec0c41c51ab6bed05d696cbeb333b63d1a50e5d config-full-paths.patch" +c8167dabea1574a2caa23f2b6f59870f4a00b5162b91d0b9deb21eee831e970b39370255f701c1cfee5c31d35904cdf61dbe666381f9c791223ef6ae35fe26bb config-full-paths.patch" diff --git a/community/dnscrypt-proxy/config-full-paths.patch b/community/dnscrypt-proxy/config-full-paths.patch index b9eac807d4..3b0258fd3f 100644 --- a/community/dnscrypt-proxy/config-full-paths.patch +++ b/community/dnscrypt-proxy/config-full-paths.patch @@ -1,9 +1,9 @@ diff --git a/./dnscrypt-proxy.toml b/dnscrypt-proxy/dnscrypt-proxy.toml new file mode 100644 -index 0000000..ceb9308 +index 0000000..cabf679 --- /dev/null +++ b/dnscrypt-proxy/dnscrypt-proxy.toml -@@ -0,0 +1,506 @@ +@@ -0,0 +1,530 @@ + +############################################## +# # @@ -81,9 +81,12 @@ index 0000000..ceb9308 +# Server must not enforce its own blacklist (for parental control, ads blocking...) +require_nofilter = true + ++# Server names to avoid even if they match all criteria ++disabled_server_names = [] ++ + +## Always use TCP to connect to upstream servers. -+## This can be can be useful if you need to route everything through Tor. ++## This can be useful if you need to route everything through Tor. +## Otherwise, leave this to `false`, as it doesn't improve security +## (dnscrypt-proxy will always encrypt everything even using UDP), and can +## only increase latency. @@ -91,13 +94,18 @@ index 0000000..ceb9308 +force_tcp = false + + -+## HTTP / SOCKS proxy ++## SOCKS proxy +## Uncomment the following line to route all TCP connections to a local Tor node +## Tor doesn't support UDP, so set `force_tcp` to `true` as well. + +# proxy = "socks5://127.0.0.1:9050" + + ++## HTTP/HTTPS proxy ++## Only for DoH servers ++ ++# http_proxy = "http://127.0.0.1:8888" ++ + +## How long a DNS query will wait for a response, in milliseconds + @@ -109,6 +117,13 @@ index 0000000..ceb9308 +keepalive = 30 + + ++## Use the REFUSED return code for blocked responses ++## Setting this to `false` means that some responses will be lies. ++## Unfortunately, `false` appears to be required for Android 8+ ++ ++refused_code_in_responses = false ++ ++ +## Load-balancing strategy: 'p2' (default), 'ph', 'fastest' or 'random' + +# lb_strategy = 'p2' @@ -191,7 +206,7 @@ index 0000000..ceb9308 +## connectivity is not guaranteed to be immediately available. +## Use 0 to disable. + -+netprobe_timeout = 30 ++netprobe_timeout = 60 + + +## Offline mode - Do not use any remote encrypted servers. @@ -493,6 +508,15 @@ index 0000000..ceb9308 + refresh_delay = 72 + prefix = '' + ++ ## Quad9 over DNSCrypt - https://quad9.net/ ++ ++ # [sources.quad9-resolvers] ++ # urls = ["https://www.quad9.net/quad9-resolvers.md"] ++ # minisign_key = "RWQBphd2+f6eiAqBsvDZEBXBGHQBJfeG6G+wJPPKxCZMoEQYpmoysKUN" ++ # cache_file = "/var/cache/dnscrypt-proxy/quad9-resolvers.md" ++ # refresh_delay = 72 ++ # prefix = "quad9-" ++ + ## Another example source, with resolvers censoring some websites not appropriate for children + ## This is a subset of the `public-resolvers` list, so enabling both is useless + |