Commit Graph

324 Commits (lucenera-patch-1)
 

Author SHA1 Message Date
lucenera f39cbaa192
Eliminate what's superfluous
1) I have deleted the "mkdir -p /etc/dnscrypt-server/keys" section in Installation: in fact with "-v /etc/dnscrypt-server/keys:/opt/encrypted-dns/etc/keys" the directory is automatically created on the host.
2) I have eliminated the options -"-ulimit nofile=90000:90000" and "--net=host" from the docker run command in Installation, because the first one was used in old versions of Docker, because they did not tolerate the limit of the number of files open simultaneously, managed by the kernel , in the standard Ubuntu session settings (and others); the second (--net=host) actually exposes the entire host stack to the container and this does not speed up, but exposes to risk and cancels the much more useful option -p 443:443/udp -p 443:443/tcp (see https://docs.docker.com/network/host/).
3) I have deleted in Installation the explanation regarding the "--net=host" option as explained in point 2.
4) In Installation, I have eliminated the section of the "docker start command dnscrypt-server", because, when the container with docker run is deployed, it is also started.
4 years ago
Frank Denis db51ca4f0e Bump versions 4 years ago
Frank Denis c4e1b96747 Enable serve-stale 4 years ago
Frank Denis e180996db2 year 4 years ago
Frank Denis 4929d02f15 Update Unbound 4 years ago
Frank Denis 9ba1c98268 Bump cache-min-ttl
Spotted by @mibere
4 years ago
Frank Denis 2110fb899d Don't include serve-expired twice 4 years ago
Frank Denis 10a60401fc Disable ratelimit in Unbound 4 years ago
Frank Denis 65f78b41d7 Enable server-expired in Unbound 4 years ago
Frank Denis 70d8e28a56 Remove --enable-event-api in Unbound compilation
Spotted by @mibere
4 years ago
Frank Denis ba7e420768 Add localhost to undelegated 4 years ago
Frank Denis 17f004e379 Fix permissions for legacy blacklists 4 years ago
Frank Denis a1f5fe6b64 Typo 4 years ago
Frank Denis a952a7e6b8 sync 4 years ago
Frank Denis 5b725a769c Update Unbound, add some undelegated zones 4 years ago
Frank Denis 1b4500184b Ensure that the blacklist file is readable 4 years ago
Frank Denis fe93f4e8f7 Sync undelegated zones 4 years ago
mibere 122b4d7942 Limit serving of expired responses (#42) 4 years ago
Frank Denis 4a81823fbc png->svg 4 years ago
Frank Denis 53ec5cdd78 Merge branch 'master' of github.com:jedisct1/dnscrypt-server-docker 4 years ago
Frank Denis b38c2500b9 Add Gitter chat badge 4 years ago
Frank Denis aa0285d893
Merge pull request #41 from mibere/master
Update README.md
4 years ago
mibere 04c8c1c5ce Update README.md
enhancements chapter 'Updating the container'
4 years ago
Frank Denis 9b7cd92696 Bump min TTL, switch daemon user and group 5 years ago
Frank Denis 33080e9766 Ensure that the keys directory is accessible from _encrypted-dns 5 years ago
Frank Denis a246506150 Copy and use undelegated.txt 5 years ago
Frank Denis 33ac5b4ad6 Import undelegated.txt 5 years ago
Frank Denis 03d780097a Sync encrypted-dns.toml.in and bump EDS version 5 years ago
Frank Denis 5e1ce7605b Add some IPv6 reverse addresses 5 years ago
Frank Denis d022ff704c Add more static zones 5 years ago
Frank Denis 28164a3dfd Documentation: add quotes around IP addresses
This is not necessary for IPv4 addresses, but it is for IPv6
addresses (to prevent shell expansion).
5 years ago
Frank Denis 7c0677c8d2 Update unbound to 1.9.6rc1 5 years ago
Frank Denis 2881cc9207 Add more undelegated zones 5 years ago
Frank Denis 743f842309
Merge pull request #40 from mibere/master
enable aggressive-nsec
5 years ago
mibere d0bb7e6ac9 enable aggressive-nsec
for detailed description and benefits read https://medium.com/nlnetlabs/aggressive-use-of-the-dnssec-validated-cache-in-unbound-1ab3e315d13f
5 years ago
mibere b15b09c12a
Merge pull request #1 from jedisct1/master
Merge pull request #39 from mibere/master
5 years ago
Frank Denis 58c2d34486
Merge pull request #39 from mibere/master
Local copy of the DNS root zone (hyperlocal)
5 years ago
mibere 9fc2cbe4b1 Local copy of the DNS root zone (hyperlocal)
Solves #38
5 years ago
Frank Denis 366c656fe0 Update doc 5 years ago
Frank Denis a649ce6701 Typo 5 years ago
Frank Denis a3786b89ef More issues found in Unbound; bump again 5 years ago
Frank Denis fa8889dc82 Update server just so that it can be compiled with rust-stable 5 years ago
Frank Denis 1955ebe6fd Use rust-beta, since nightly can be broken 5 years ago
Frank Denis 77d5a48b04 Update Unbound 5 years ago
Frank Denis 973727b67d
Merge pull request #36 from IceCodeNew/master
Typo fix
5 years ago
IceCodeNew e4e025923e
Typo fix 5 years ago
Frank Denis 93d0ffe461 Explain how to delete everything 5 years ago
Frank Denis 31eb8b19b1 Upgrade to eoan 5 years ago
Frank Denis 8a83fc7b69 Merge remote-tracking branch 'org/master'
* org/master:
  rename to install-centos.sh
  add Vultr install script
5 years ago
Frank Denis f65221ffe7 Remove debug information 5 years ago