Files
infrastructure/servers/legion/k8s/adguard/configmap.yaml
T
Will Anderson f50d14ccdc fix(adguard): use Tailscale IP for split-horizon DNS rewrites
LAN IP 192.168.68.77 unreachable over Tailscale VPN. 100.64.0.1 works
for both LAN (Tailscale installed) and remote VPN clients. Also adds
*.neuralplatform.dev which was missing from the configmap.
2026-04-04 10:59:33 -05:00

63 lines
1.6 KiB
YAML

apiVersion: v1
kind: ConfigMap
metadata:
name: adguard-defaults
namespace: dns
data:
AdGuardHome.yaml: |
dns:
bind_hosts:
- 0.0.0.0
port: 53
upstream_dns:
- https://dns.cloudflare.com/dns-query
- https://dns.google/dns-query
bootstrap_dns:
- 1.1.1.1
- 8.8.8.8
- 9.9.9.10
- 149.112.112.10
upstream_mode: load_balance
cache_enabled: true
cache_size: 4194304
filters:
- enabled: true
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt
name: AdGuard DNS filter
id: 1
- enabled: true
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
name: AdAway Default Blocklist
id: 2
- enabled: true
url: https://big.oisd.nl/domainswild
name: OISD Big
id: 3
- enabled: true
url: https://easylist.to/easylist/easylist.txt
name: EasyList
id: 4
- enabled: true
url: https://easylist.to/easylist/easyprivacy.txt
name: EasyPrivacy
id: 5
tls:
enabled: true
server_name: dot.nook.family
port_dns_over_tls: 853
certificate_path: /etc/adguard/tls/tls.crt
private_key_path: /etc/adguard/tls/tls.key
allow_unencrypted_doh: true
filtering:
filtering_enabled: true
rewrites:
- domain: '*.nook.family'
answer: 100.64.0.1
enabled: true
- domain: '*.neuralplatform.ai'
answer: 100.64.0.1
enabled: true
- domain: '*.neuralplatform.dev'
answer: 100.64.0.1
enabled: true