working split dns
This commit is contained in:
		
							parent
							
								
									03b1edc941
								
							
						
					
					
						commit
						9723f79d24
					
				|  | @ -44,26 +44,31 @@ in | ||||||
|     settings = { |     settings = { | ||||||
|       server = { |       server = { | ||||||
|         include = "${adblockLocalZones}"; |         include = "${adblockLocalZones}"; | ||||||
|  |         prefetch = "yes"; | ||||||
|  |         # private-address = "10.0.69.0/8"; | ||||||
|  |         # private-address = "192.168.1.0/24"; | ||||||
|  |         cache-min-ttl = 0; | ||||||
|  |         serve-expired = "yes"; | ||||||
|         interface = [ "0.0.0.0" ]; |         interface = [ "0.0.0.0" ]; | ||||||
|         access-control = [ "127.0.0.0/24 allow" "192.168.0.0/24 allow" "10.0.69.0/24 allow" ]; |         access-control = [ "127.0.0.0/8 allow" "192.168.1.0/24 allow" "10.0.69.0/24 allow" ]; | ||||||
|         access-control-view = "10.0.69.0/24 wireguard"; |         access-control-view = "10.0.69.0/24 wireguard"; | ||||||
|  |         # so-reuseport = "yes"; | ||||||
|  |         tls-upstream = "yes"; | ||||||
|  |         domain-insecure = "mossnet.lan"; | ||||||
|         local-zone = ''"mossnet.lan." redirect''; |         local-zone = ''"mossnet.lan." redirect''; | ||||||
|         local-data = ''"mossnet.lan. IN A ${mossnet}"''; |         local-data = ''"mossnet.lan. IN A ${mossnet}"''; | ||||||
|       }; |       }; | ||||||
|       forward-zone = [{ |       forward-zone = [{ | ||||||
|         name = "."; |         name = "."; | ||||||
|         forward-addr = [ "45.90.30.49" "45.90.28.49" "1.1.1.1" "8.8.8.8" ]; |         forward-addr = [ "45.90.28.0#6939b9.dns.nextdns.io" "1.1.1.1@853#cloudflare-dns.com" ]; | ||||||
|  |         # non-tls | ||||||
|  |         # forward-addr = ["45.90.30.49" "45.90.28.49" "1.1.1.1" "8.8.8.8"]  | ||||||
|       }]; |       }]; | ||||||
|       view = { |       view = { | ||||||
|         name = "wireguard"; |         name = "wireguard"; | ||||||
|         local-zone = ''"mossnet.lan." redirect''; |         local-zone = ''"mossnet.lan." redirect''; | ||||||
|         local-data = ''"mossnet.lan. IN A ${wg-mossnet}"''; |         local-data = ''"mossnet.lan. IN A ${wg-mossnet}"''; | ||||||
|       }; |       }; | ||||||
|       do-not-query-localhost = "no"; |  | ||||||
|       #  Eventually we'll add DNSSEC / DoT |  | ||||||
|       #  so-reuseport: yes |  | ||||||
|       #  tls-cert-bundle: /etc/ssl/certs/ca-certificates.crt |  | ||||||
|       #  tls-upstream: yes |  | ||||||
|     }; |     }; | ||||||
|   }; |   }; | ||||||
| 
 | 
 | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue