|
config global
|
|
# start dnscrypt-proxy from procd interface trigger rather than immediately in init
|
|
# if needed you can restrict trigger to certain interface(s)
|
|
# list procd_trigger 'wan'
|
|
# list procd_trigger 'wan6'
|
|
|
|
config dnscrypt-proxy ns1
|
|
option address '127.0.0.1'
|
|
option port '5353'
|
|
option resolver 'quad9-dnscrypt-ip4-nofilter-pri'
|
|
# more details about the following options can be found in:
|
|
# https://github.com/dyne/dnscrypt-proxy/blob/master/dnscrypt-proxy.conf
|
|
# option resolvers_list '/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv'
|
|
# ephemeral keys option requires extra CPU cycles and can cause huge system load
|
|
# option ephemeral_keys '0'
|
|
# option client_key '/path/to/client_key'
|
|
# option log_level '6'
|
|
# option syslog '1'
|
|
# option syslog_prefix 'dnscrypt-proxy'
|
|
# option query_log_file '/path/to/logfile'
|
|
# enable cache may speed up dnscrypt-proxy
|
|
# option local_cache '0'
|
|
# disable IPv6 may also speed up dnscrypt-proxy
|
|
# option block_ipv6 '0'
|
|
# Blacklists allow you to block domains, ip, ...
|
|
# list blacklist 'domains:/path/to/domains-blacklist-file.txt'
|
|
# list blacklist 'domains:/path/to/domains-blacklist2-file.txt'
|
|
|
|
# config dnscrypt-proxy ns2
|
|
# option address '127.0.0.1'
|
|
# option port '5454'
|
|
# # option resolver 'adguard-dns'
|
|
# # option resolvers_list '/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv'
|
|
# # option ephemeral_keys '0'
|
|
# # option client_key ''
|