Will Anderson
eefaeafcfc
Split-horizon breaks VPN/LAN hybrid scenarios. Let all clients use public DNS (Cloudflare proxy IPs) and route via CF tunnel. Works everywhere, no network-topology-dependent DNS required.
54 lines
1.4 KiB
YAML
54 lines
1.4 KiB
YAML
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: adguard-defaults
|
|
namespace: dns
|
|
data:
|
|
AdGuardHome.yaml: |
|
|
dns:
|
|
bind_hosts:
|
|
- 0.0.0.0
|
|
port: 53
|
|
upstream_dns:
|
|
- https://dns.cloudflare.com/dns-query
|
|
- https://dns.google/dns-query
|
|
bootstrap_dns:
|
|
- 1.1.1.1
|
|
- 8.8.8.8
|
|
- 9.9.9.10
|
|
- 149.112.112.10
|
|
upstream_mode: load_balance
|
|
cache_enabled: true
|
|
cache_size: 4194304
|
|
filters:
|
|
- enabled: true
|
|
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt
|
|
name: AdGuard DNS filter
|
|
id: 1
|
|
- enabled: true
|
|
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
|
|
name: AdAway Default Blocklist
|
|
id: 2
|
|
- enabled: true
|
|
url: https://big.oisd.nl/domainswild
|
|
name: OISD Big
|
|
id: 3
|
|
- enabled: true
|
|
url: https://easylist.to/easylist/easylist.txt
|
|
name: EasyList
|
|
id: 4
|
|
- enabled: true
|
|
url: https://easylist.to/easylist/easyprivacy.txt
|
|
name: EasyPrivacy
|
|
id: 5
|
|
tls:
|
|
enabled: true
|
|
server_name: dot.nook.family
|
|
port_dns_over_tls: 853
|
|
certificate_path: /etc/adguard/tls/tls.crt
|
|
private_key_path: /etc/adguard/tls/tls.key
|
|
allow_unencrypted_doh: true
|
|
filtering:
|
|
filtering_enabled: true
|
|
rewrites: []
|