Expose AdGuard DoH at dns.neuralplatform.ai

servers/legion/adguard.tf

@@ -88,6 +88,8 @@ resource "kubernetes_config_map" "adguard_defaults" {
           url: https://easylist.to/easylist/easyprivacy.txt
           name: EasyPrivacy
           id: 5
+      tls:
+        allow_unencrypted_doh: true
       filtering:
         filtering_enabled: true
         rewrites:

servers/legion/apps/adguard.yaml

@@ -57,6 +57,9 @@ spec:
                       else:
                           cfg.setdefault("filters", []).append(df)
 
+                  # Enforce allow_unencrypted_doh
+                  cfg.setdefault("tls", {})["allow_unencrypted_doh"] = True
+
                   # Fix/ensure rewrites
                   cfg.setdefault("filtering", {})
                   existing_rw = {rw["domain"]: rw for rw in cfg["filtering"].get("rewrites", [])}