Created
October 20, 2020 17:04
-
-
Save xenialaq/3b5a8bfbcad8cd7ad319123ca18ead47 to your computer and use it in GitHub Desktop.
Stubby's uci config for OpenWrt with RPI running as a wlan client
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
config stubby 'global' | |
option manual '0' | |
option trigger 'wwan' | |
# option triggerdelay '2' | |
list dns_transport 'GETDNS_TRANSPORT_TLS' | |
option tls_authentication '1' | |
option tls_query_padding_blocksize '256' | |
# option tls_connection_retries '2' | |
# option tls_backoff_time '3600' | |
# option timeout '5000' | |
# option dnssec_return_status '0' | |
option appdata_dir '/var/lib/stubby' | |
# option trust_anchors_backoff_time 2500 | |
# option dnssec_trust_anchors '/var/lib/stubby/getdns-root.key' | |
option edns_client_subnet_private '0' | |
option idle_timeout '10000' | |
option round_robin_upstreams '1' | |
list listen_address '127.0.0.1@5453' | |
list listen_address '0::1@5453' | |
option log_level '7' | |
# option command_line_arguments '' | |
# option tls_cipher_list 'EECDH+AESGCM:EECDH+CHACHA20' | |
# option tls_ciphersuites 'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256' | |
# option tls_min_version '1.2' | |
# option tls_max_version '1.3' | |
# Upstream resolvers are specified using 'resolver' sections. | |
config resolver | |
option address '185.222.222.222' | |
option tls_auth_name 'dns.sb' | |
config resolver | |
option address '185.184.222.222' | |
option tls_auth_name 'dns.sb' | |
config resolver | |
option address '2a09::0' | |
option tls_auth_name 'dns.sb' | |
config resolver | |
option address '2a09::1' | |
option tls_auth_name 'dns.sb' | |
config resolver | |
option address '174.138.29.175' | |
option tls_auth_name 'dot.tiar.app' | |
config resolver | |
option address '2400:6180:0:d0::5f73:4001' | |
option tls_auth_name 'dot.tiar.app' | |
config resolver | |
option address '91.239.100.100' | |
option tls_auth_name 'anycast.censurfridns.dk' | |
config resolver | |
option address '2001:67c:28a4:0:0:0:0:0' | |
option tls_auth_name 'anycast.censurfridns.dk' | |
config resolver | |
option address '89.233.43.71' | |
option tls_auth_name 'unicast.censurfridns.dk' | |
config resolver | |
option address '2a01:3a0:53:53:0:0:0:0' | |
option tls_auth_name 'unicast.censurfridns.dk' |
Author
xenialaq
commented
Oct 20, 2020
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment