Skip to content

Instantly share code, notes, and snippets.

@Jesse-V
Created December 19, 2015 20:59
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save Jesse-V/675b7ec87eca864887e6 to your computer and use it in GitHub Desktop.
Save Jesse-V/675b7ec87eca864887e6 to your computer and use it in GitHub Desktop.
DNSCrypt encrypted DNS + Unbound cache
/usr/local/sbin/dnscrypt-proxy --resolver-address=<address> --provider-key=<publicKey> --provider-name=<name> --ephemeral-keys --local-address=127.0.53.1 --daemonize
# /etc/resolv/resolv.conf
nameserver 127.0.53.53
# /etc/unbound/unbound.conf.d/root-auto-trust-anchor-file.conf
# auto-trust-anchor-file: "/var/lib/unbound/root.key"
# /etc/unbound/unbound.conf
include: "/etc/unbound/unbound.conf.d/*.conf"
server:
val-permissive-mode: yes
interface: 127.0.53.53
hide-identity: yes
hide-version: yes
cache-min-ttl: 900
prefetch: yes
num-threads: 2
do-not-query-localhost: no
forward-zone:
name: "."
forward-addr: 127.0.53.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment