diff --git "a/ansible/\\" "b/ansible/\\" new file mode 100644 index 0000000..677a61d --- /dev/null +++ "b/ansible/\\" @@ -0,0 +1,106 @@ + + + + mydns + + + + + + + + +
+
+ +
+
+

+ this is my anonymous dns server. you are free to use it, but just letting you know, this is mine, so it only really has features i care about. +

+

+ the only thing i record are long-term metrics, for the health of the service. +

+

+ it's meant to preserve my privacy (along with anyone who is using its). + in large, my goal is to avoid my dns data being sold to advertisers. +

+
+
+

endpoints

+

+ + + + + + + + + + + + + + + + + + + + + + + +
typeendpointadditional info
+ DoH/DoH3 + + https://mydns.gay/dns-query + + via ip4/ ipv6. +
+ DNS / DoT (IPv4) + + 172.232.13.191 + + SNI for TLS is mydns.gay +
+ DNS / DoT (IPv6) + + 2600:3c06::f03c:94ff:fe68:afad + + SNI for TLS is mydns.gay +
+

+
+ +
+

information

+

+ the server is in linode ORD datacenter. if i believe that linode one day is unfit to run this service, i will switch. +

+

+ i'm really lazy, so the truth is, this is made from patching together a bunch of open source tools +

+

+ +
+
+ + + diff --git a/ansible/assets/index.html b/ansible/assets/index.html index a3ab0f1..0445eb8 100644 --- a/ansible/assets/index.html +++ b/ansible/assets/index.html @@ -20,21 +20,13 @@

this is my anonymous dns server. you are free to use it, but just letting you know, this is mine, so it only really has features i care about.

+

+ the only thing i record are long-term metrics, for the health of the service. +

it's meant to preserve my privacy (along with anyone who is using its). in large, my goal is to avoid my dns data being sold to advertisers.

-

- the only thing i record are long-term metrics, for the health of the service. - - the server is in linode ORD datacenter. if i believe that linode one day is unfit to run this service, i will switch. -

-

- software used:

-

endpoints

@@ -54,42 +46,48 @@ https://mydns.gay/dns-query - via ip4, ipv6. TLS powered by caddy + via ip4/ipv6. - DNS + DNS (IPv4) - 172.232.13.191 / mydns.gay + 172.232.13.191 - port 53 - DNS (ipv6) + DNS (IPv6) - - 2600:3c06::f03c:94ff:fe68:afad - / mydns.gay + [2600:3c06::f03c:94ff:fe68:afad] - port 53 + + DNS over TLS/DoQ (IPv4) + + + 172.232.13.191:853 + + + SNI for TLS is mydns.gay + + - DoT + DNS over TLS/DoQ (IPv6) - 172.232.13.191:853 / mydns.gay:853 + [2600:3c06::f03c:94ff:fe68:afad]:853 - Dns over TLS + SNI for TLS is mydns.gay @@ -101,6 +99,27 @@

information

--> +
+

information

+

+ the server is in linode ORD datacenter. if i believe that linode one day is unfit to run this service, i will switch. +

+

+ i'm really lazy, so the truth is, this is made from patching together a bunch of open source tools +

+

+ +
+ diff --git a/ansible/files/dnsdist.conf b/ansible/files/dnsdist.conf index 14df085..29cbfed 100644 --- a/ansible/files/dnsdist.conf +++ b/ansible/files/dnsdist.conf @@ -22,9 +22,15 @@ addAction(MaxQPSIPRule(5, 32, 48, 20), DelayAction(100)) webserver("127.0.0.1:6060") setWebserverConfig({ statsRequireAuthentication=false }) setLocal("0.0.0.0:53") + +-- proxied by caddy addDOHLocal("127.0.0.1:8053", nil, nil, "/dns-query", { reusePort=true, trustForwardedForHeader=true }) + addTLSLocal('0.0.0.0:853', tls_cert_crt, tls_cert_key) addTLSLocal('[::]:853', tls_cert_crt, tls_cert_key) +addDOQLocal('0.0.0.0:853', tls_cert_crt, tls_cert_key) +addDOQLocal('[::]:853', tls_cert_crt, tls_cert_key) + addACL('0.0.0.0/0') addACL('::/0')