2
0
mirror of https://github.com/dnscrypt/dnscrypt-server-docker synced 2024-11-17 15:25:33 +00:00
Commit Graph

362 Commits

Author SHA1 Message Date
Frank Denis
773914ee9e Update unbound 2021-05-31 18:50:30 +02:00
Frank Denis
759b20cd6f
Merge pull request #100 from PeterDaveHello/FixDockerfileCommands
Use `&&` instead of `;` to properly combine commands in Dockerfile
2021-05-31 18:45:50 +02:00
Peter Dave Hello
9671fa5aab Use && instead of ; to properly combine commands in Dockerfile 2021-05-31 23:42:41 +08:00
Frank Denis
22808f0601 Ubuntu 21.04 changed /etc/service to /etc/runit/runsvdir/svmanaged 2021-04-22 20:52:40 +02:00
Frank Denis
ca2efdc731 Revert "Update to Ubuntu 21.04"
This reverts commit 9ac84c44ec.
2021-04-22 19:50:23 +02:00
Frank Denis
9ac84c44ec Update to Ubuntu 21.04 2021-04-22 17:03:36 +02:00
Frank Denis
d942b32f6b Little bump for the OpenSSL and Unbound issues 2021-02-18 00:47:01 +01:00
Frank Denis
cc55bb3c5d EDS update 2021-02-09 22:33:47 +01:00
Frank Denis
c1f81811e0 Unbound 1.13.1 2021-02-09 22:31:30 +01:00
Frank Denis
549c8a553f Make val-bogus-ttl match cache_ttl_error
Fixes #92
2021-02-09 22:31:27 +01:00
Frank Denis
20f8abc760
Kubernetes example: Prometheus option is -M, not -P
Fixes #98
2021-01-18 00:31:49 +01:00
Frank Denis
a1016974e0 anchore: s/image-reference/image/ 2020-12-12 12:54:21 +01:00
Frank Denis
bfcaa89430 Disable udp-connect 2020-12-12 12:29:27 +01:00
Frank Denis
cbc66bd7f1 Switch anchore branch to main 2020-12-12 01:13:24 +01:00
Frank Denis
27c8ab16da Switch to Ubuntu 20.10 2020-12-12 01:00:12 +01:00
Frank Denis
bfd1f5bd83 Update Unbound and EDS 2020-12-12 00:58:18 +01:00
Frank Denis
d6375445e4
Merge pull request #91 from mibere/master
Version of Unbound & encrypted-dns adapted
2020-10-10 18:33:31 +02:00
mibere
b99927c24f
Version of Unbound & encrypted-dns adapted 2020-10-10 18:18:42 +02:00
Frank Denis
ecd14ddcc6 Merge branch 'master' of github.com:DNSCrypt/dnscrypt-server-docker into master
* 'master' of github.com:DNSCrypt/dnscrypt-server-docker:
  Adjust edns-buffer-size (DNS Flag Day 2020)
2020-10-02 00:50:07 +02:00
Frank Denis
3f947c2923 Unbound 1.12.0rc1 2020-10-02 00:49:34 +02:00
Frank Denis
e0c6e3887b
Merge pull request #89 from mibere/master
Adjust edns-buffer-size (DNS Flag Day 2020)
2020-09-08 21:34:48 +02:00
mibere
eaaabf72f1 Adjust edns-buffer-size (DNS Flag Day 2020)
DNS Flag Day 2020 recommends a message size of 1232 bytes to avoid IP fragmentation while minimizaing the use of TCP
2020-09-08 18:49:33 +02:00
Frank Denis
6275545086 Update Unbound to version 1.11.0 2020-07-27 13:30:39 +02:00
Frank Denis
a5a2048266 If the container is run in NAT mode, client IP addresses will be messed up
So, disable my.ip in the Docker image
2020-06-15 12:42:59 +02:00
Frank Denis
facb03f1db Move Gitter chat badge to the left 2020-06-11 10:40:26 +02:00
Frank Denis
849b2695f1 Goodbye Travis, we'll use GitHub Actions instead 2020-06-11 10:35:19 +02:00
Frank Denis
6d067448b3 travis-ci.org -> .com 2020-06-11 10:32:22 +02:00
Frank Denis
147c03281a
Add Anchore analyzer 2020-06-11 09:54:00 +02:00
Frank Denis
ebb083c515 Bump EDS 2020-05-20 16:05:49 +02:00
Frank Denis
e1c44f263b Update Unbound 2020-05-20 15:40:51 +02:00
woftor
8d0f779bfe
Removed --net=host as default for the docker container (#46)
Removed --net=host as default for the docker container
It does forward port 443 tcp/udp to the host, but it also had "--net=host" when starting. That defeats the purpose of the port forward.
Removing "--net=host" as it is also in line with the rest of the documentation.
2020-04-27 23:08:31 +02:00
woftor
f6e9f4e9f6
Update watchtower to more up to date version (#45)
v2tec/watchtower is not maintained anymore (at least past 2 years). Switch to containrrr/watchtower, which is actively developed.
2020-04-26 23:34:31 +02:00
Frank Denis
7979ac440c install-centos.sh - update paths to match the documentation
Fixes #85
2020-04-24 12:30:13 +02:00
Frank Denis
2858a6ea52 Upgrade base layer to the current Ubuntu LTS (20.04) 2020-04-23 16:33:52 +02:00
Frank Denis
9793a25dcb Merge branch 'master' of github.com:DNSCrypt/dnscrypt-server-docker
* 'master' of github.com:DNSCrypt/dnscrypt-server-docker:
  Eliminate what's superfluous
2020-04-20 16:45:11 +02:00
Frank Denis
c55108d7da Update encrypted-dns-server 2020-04-20 16:44:40 +02:00
lucenera
b6079d5d48
Merge pull request #84 from DNSCrypt/lucenera-patch-1
Eliminate what's superfluous
2020-03-28 00:35:49 +01:00
lucenera
f39cbaa192
Eliminate what's superfluous
1) I have deleted the "mkdir -p /etc/dnscrypt-server/keys" section in Installation: in fact with "-v /etc/dnscrypt-server/keys:/opt/encrypted-dns/etc/keys" the directory is automatically created on the host.
2) I have eliminated the options -"-ulimit nofile=90000:90000" and "--net=host" from the docker run command in Installation, because the first one was used in old versions of Docker, because they did not tolerate the limit of the number of files open simultaneously, managed by the kernel , in the standard Ubuntu session settings (and others); the second (--net=host) actually exposes the entire host stack to the container and this does not speed up, but exposes to risk and cancels the much more useful option -p 443:443/udp -p 443:443/tcp (see https://docs.docker.com/network/host/).
3) I have deleted in Installation the explanation regarding the "--net=host" option as explained in point 2.
4) In Installation, I have eliminated the section of the "docker start command dnscrypt-server", because, when the container with docker run is deployed, it is also started.
2020-03-28 00:01:57 +01:00
Frank Denis
64a841d5ef Downgrade Unbound, disable serve-stale, disable parking_lot for tokio
Essentially revert anything new and potentially causing #80
2020-03-21 18:14:31 +01:00
Frank Denis
db51ca4f0e Bump versions 2020-03-20 15:10:03 +01:00
Frank Denis
c4e1b96747 Enable serve-stale 2020-03-20 15:09:41 +01:00
Frank Denis
e180996db2 year 2020-03-20 15:09:34 +01:00
Frank Denis
4929d02f15 Update Unbound 2020-03-09 23:28:01 +01:00
Frank Denis
9ba1c98268 Bump cache-min-ttl
Spotted by @mibere
2020-01-31 20:17:42 +01:00
Frank Denis
2110fb899d Don't include serve-expired twice 2020-01-27 19:30:21 +01:00
Frank Denis
10a60401fc Disable ratelimit in Unbound 2020-01-27 16:46:38 +01:00
Frank Denis
65f78b41d7 Enable server-expired in Unbound 2020-01-27 16:45:41 +01:00
Frank Denis
70d8e28a56 Remove --enable-event-api in Unbound compilation
Spotted by @mibere
2019-12-26 20:20:41 +01:00
Frank Denis
ba7e420768 Add localhost to undelegated 2019-12-26 11:17:35 +01:00
Frank Denis
17f004e379 Fix permissions for legacy blacklists 2019-12-24 13:48:56 +01:00