upstreams: init: strategy: fast groups: default: - tcp-tls:1.1.1.1:853 - tcp-tls:1.0.0.1:853 strategy: parallel_best timeout: 2s connectIPVersion: v4 customDNS: filterUnmappedTypes: false zone: | $ORIGIN alexlebens.net. $TTL 86400 ;; Name Server IN NS patryk.ns.cloudflare.com. IN NS veda.ns.cloudflare.com. IN NS dns1. IN NS dns2. IN NS dns3. dns1 IN A 10.232.1.22 dns2 IN A 10.232.1.51 dns3 IN A 10.232.1.52 ;; Computer Names nw01un IN A 192.168.1.1 ; Unifi Gateway ps08rp IN A 10.232.1.51 ; DNS ps09rp IN A 10.232.1.52 ; DNS ps02sn IN A 10.232.1.61 ; Synology Web ps02sn-bond IN A 10.232.1.64 ; Synology Bond for Storage pd05wd IN A 10.230.0.115 ; Desktop pl02mc IN A 10.230.0.105 ; Laptop dv01hr IN A 10.232.1.72 ; HD Homerun dv02kv IN A 10.232.1.71 ; Pi KVM it01ag IN A 10.232.1.83 ; Airgradient it02ph IN A 10.232.1.85 ; Phillips Hue it03tb IN A 10.232.1.81 ; TubesZB ZigBee it04tb IN A 10.232.1.82 ; TubesZB Z-Wave it05sp IN A 10.230.0.100 ; Shelly Plug ;; Common Names synology IN CNAME ps02sn synologybond IN CNAME ps02sn-bond unifi IN CNAME nw01un airgradient IN CNAME it01ag hdhr IN CNAME dv01hr pikvm IN CNAME dv02kv ;; Service Names cl01tl IN A 10.232.1.11 cl01tl IN A 10.232.1.12 cl01tl IN A 10.232.1.13 cl01tl-api IN A 10.232.1.11 cl01tl-api IN A 10.232.1.12 cl01tl-api IN A 10.232.1.13 cl01tl-endpoint IN A 10.232.1.21 cl01tl-endpoint IN A 10.232.1.22 cl01tl-endpoint IN A 10.232.1.23 traefik-cl01tl IN A 10.232.1.21 blocky IN A 10.232.1.22 plex-lb IN A 10.232.1.23 ;; Application Names actual IN CNAME traefik-cl01tl alertmanager IN CNAME traefik-cl01tl argo-workflows IN CNAME traefik-cl01tl argocd IN CNAME traefik-cl01tl audiobookshelf IN CNAME traefik-cl01tl authentik IN CNAME traefik-cl01tl bazarr IN CNAME traefik-cl01tl calibre IN CNAME traefik-cl01tl calibre-downloader IN CNAME traefik-cl01tl ceph IN CNAME traefik-cl01tl code-server IN CNAME traefik-cl01tl eigenfocus IN CNAME traefik-cl01tl gatus IN CNAME traefik-cl01tl gitea IN CNAME traefik-cl01tl grafana IN CNAME traefik-cl01tl harbor IN CNAME traefik-cl01tl headlamp IN CNAME traefik-cl01tl home IN CNAME traefik-cl01tl home-assistant IN CNAME traefik-cl01tl home-assistant-code-server IN CNAME traefik-cl01tl hubble IN CNAME traefik-cl01tl huntarr IN CNAME traefik-cl01tl immich IN CNAME traefik-cl01tl jellyfin IN CNAME traefik-cl01tl jellystat IN CNAME traefik-cl01tl kiwix IN CNAME traefik-cl01tl komodo IN CNAME traefik-cl01tl kronic IN CNAME traefik-cl01tl lidarr IN CNAME traefik-cl01tl lidatube IN CNAME traefik-cl01tl mail IN CNAME traefik-cl01tl minio-directus IN CNAME traefik-cl01tl minio-outline IN CNAME traefik-cl01tl n8n IN CNAME traefik-cl01tl ntfy IN CNAME traefik-cl01tl objects IN CNAME traefik-cl01tl ollama IN CNAME traefik-cl01tl omni-tools IN CNAME traefik-cl01tl overseerr IN CNAME traefik-cl01tl pgadmin IN CNAME traefik-cl01tl photoview IN CNAME traefik-cl01tl plex IN CNAME traefik-cl01tl postiz IN CNAME traefik-cl01tl prometheus IN CNAME traefik-cl01tl prowlarr IN CNAME traefik-cl01tl qbittorrent IN CNAME traefik-cl01tl radarr IN CNAME traefik-cl01tl radarr-4k IN CNAME traefik-cl01tl radarr-anime IN CNAME traefik-cl01tl radarr-standup IN CNAME traefik-cl01tl searxng IN CNAME traefik-cl01tl slskd IN CNAME traefik-cl01tl sonarr IN CNAME traefik-cl01tl sonarr-4k IN CNAME traefik-cl01tl sonarr-anime IN CNAME traefik-cl01tl stalwart IN CNAME traefik-cl01tl tautulli IN CNAME traefik-cl01tl tdarr IN CNAME traefik-cl01tl tubearchivist IN CNAME traefik-cl01tl vault IN CNAME traefik-cl01tl whodb IN CNAME traefik-cl01tl yamtrack IN CNAME traefik-cl01tl blocking: denylists: sus: - https://v.firebog.net/hosts/static/w3kbl.txt ads: - https://v.firebog.net/hosts/AdguardDNS.txt - https://v.firebog.net/hosts/Admiral.txt - https://v.firebog.net/hosts/Easylist.txt - https://adaway.org/hosts.txt priv: - https://v.firebog.net/hosts/Easyprivacy.txt - https://v.firebog.net/hosts/Prigent-Ads.txt mal: - https://v.firebog.net/hosts/Prigent-Crypto.txt - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt pro: - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt allowlists: sus: - | *.alexlebens.net *.alexlebens.dev *.boreal-beaufort.ts.net ads: - | *.alexlebens.net *.alexlebens.dev *.boreal-beaufort.ts.net priv: - | *.alexlebens.net *.alexlebens.dev *.boreal-beaufort.ts.net mal: - | *.alexlebens.net *.alexlebens.dev *.boreal-beaufort.ts.net pro: - | *.alexlebens.net *.alexlebens.dev *.boreal-beaufort.ts.net clientGroupsBlock: default: - sus - ads - priv - mal - pro blockType: zeroIp blockTTL: 1m loading: refreshPeriod: 24h downloads: timeout: 60s attempts: 5 cooldown: 10s concurrency: 16 strategy: fast maxErrorsPerSource: 5 caching: minTime: 5m maxTime: 30m maxItemsCount: 0 prefetching: true prefetchExpires: 2h prefetchThreshold: 5 prefetchMaxItemsCount: 0 cacheTimeNegative: 30m prometheus: enable: true path: /metrics queryLog: type: console logRetentionDays: 7 creationAttempts: 1 creationCooldown: 2s flushInterval: 30s minTlsServeVersion: 1.3 ports: dns: 53 http: 4000 log: level: info format: text timestamp: true privacy: false