232 lines
8.7 KiB
YAML
232 lines
8.7 KiB
YAML
upstreams:
|
|
init:
|
|
strategy: fast
|
|
groups:
|
|
default:
|
|
- tcp-tls:1.1.1.1:853
|
|
- tcp-tls:1.0.0.1:853
|
|
strategy: parallel_best
|
|
timeout: 2s
|
|
|
|
connectIPVersion: v4
|
|
|
|
customDNS:
|
|
filterUnmappedTypes: false
|
|
zone: |
|
|
$ORIGIN alexlebens.net.
|
|
$TTL 86400
|
|
|
|
;; Name Server
|
|
IN NS patryk.ns.cloudflare.com.
|
|
IN NS veda.ns.cloudflare.com.
|
|
IN NS dns1.
|
|
IN NS dns2.
|
|
IN NS dns3.
|
|
|
|
dns1 IN A 10.232.1.22
|
|
dns2 IN A 10.232.1.51
|
|
dns3 IN A 10.232.1.52
|
|
|
|
|
|
;; Computer Names
|
|
nw01un IN A 192.168.1.1 ; Unifi Gateway
|
|
|
|
ps08rp IN A 10.232.1.51 ; DNS
|
|
ps09rp IN A 10.232.1.52 ; DNS
|
|
ps02sn IN A 10.232.1.61 ; Synology Web
|
|
ps02sn-bond IN A 10.232.1.64 ; Synology Bond for Storage
|
|
|
|
pd05wd IN A 10.230.0.115 ; Desktop
|
|
pl02mc IN A 10.230.0.105 ; Laptop
|
|
|
|
dv01hr IN A 10.232.1.72 ; HD Homerun
|
|
dv02kv IN A 10.232.1.71 ; Pi KVM
|
|
|
|
it01ag IN A 10.232.1.83 ; Airgradient
|
|
it02ph IN A 10.232.1.85 ; Phillips Hue
|
|
it03tb IN A 10.232.1.81 ; TubesZB ZigBee
|
|
it04tb IN A 10.232.1.82 ; TubesZB Z-Wave
|
|
|
|
|
|
;; Common Names
|
|
synology IN CNAME ps02sn
|
|
synologybond IN CNAME ps02sn-bond
|
|
unifi IN CNAME nw01un
|
|
airgradient IN CNAME it01ag
|
|
hdhr IN CNAME dv01hr
|
|
pikvm IN CNAME dv02kv
|
|
|
|
|
|
;; Service Names
|
|
cl01tl IN A 10.232.1.11
|
|
cl01tl IN A 10.232.1.12
|
|
cl01tl IN A 10.232.1.13
|
|
|
|
cl01tl-api IN A 10.232.1.11
|
|
cl01tl-api IN A 10.232.1.12
|
|
cl01tl-api IN A 10.232.1.13
|
|
|
|
cl01tl-endpoint IN A 10.232.1.21
|
|
cl01tl-endpoint IN A 10.232.1.22
|
|
cl01tl-endpoint IN A 10.232.1.23
|
|
|
|
traefik-cl01tl IN A 10.232.1.21
|
|
blocky IN A 10.232.1.22
|
|
plex-lb IN A 10.232.1.23
|
|
|
|
|
|
;; Application Names
|
|
actual IN CNAME traefik-cl01tl
|
|
alertmanager IN CNAME traefik-cl01tl
|
|
argo-workflows IN CNAME traefik-cl01tl
|
|
argocd IN CNAME traefik-cl01tl
|
|
audiobookshelf IN CNAME traefik-cl01tl
|
|
authentik IN CNAME traefik-cl01tl
|
|
bazarr IN CNAME traefik-cl01tl
|
|
calibre IN CNAME traefik-cl01tl
|
|
calibre-downloader IN CNAME traefik-cl01tl
|
|
ceph IN CNAME traefik-cl01tl
|
|
code-server IN CNAME traefik-cl01tl
|
|
eigenfocus IN CNAME traefik-cl01tl
|
|
gitea IN CNAME traefik-cl01tl
|
|
grafana IN CNAME traefik-cl01tl
|
|
harbor IN CNAME traefik-cl01tl
|
|
headlamp IN CNAME traefik-cl01tl
|
|
home IN CNAME traefik-cl01tl
|
|
home-assistant IN CNAME traefik-cl01tl
|
|
home-assistant-code-server IN CNAME traefik-cl01tl
|
|
hubble IN CNAME traefik-cl01tl
|
|
huntarr IN CNAME traefik-cl01tl
|
|
immich IN CNAME traefik-cl01tl
|
|
jellyfin IN CNAME traefik-cl01tl
|
|
jellystat IN CNAME traefik-cl01tl
|
|
kiwix IN CNAME traefik-cl01tl
|
|
komodo IN CNAME traefik-cl01tl
|
|
lidarr IN CNAME traefik-cl01tl
|
|
lidatube IN CNAME traefik-cl01tl
|
|
mail IN CNAME traefik-cl01tl
|
|
minio-directus IN CNAME traefik-cl01tl
|
|
minio-outline IN CNAME traefik-cl01tl
|
|
n8n IN CNAME traefik-cl01tl
|
|
ntfy IN CNAME traefik-cl01tl
|
|
ollama IN CNAME traefik-cl01tl
|
|
overseerr IN CNAME traefik-cl01tl
|
|
pgadmin IN CNAME traefik-cl01tl
|
|
photoview IN CNAME traefik-cl01tl
|
|
plex IN CNAME traefik-cl01tl
|
|
postiz IN CNAME traefik-cl01tl
|
|
prometheus IN CNAME traefik-cl01tl
|
|
prowlarr IN CNAME traefik-cl01tl
|
|
qbittorrent IN CNAME traefik-cl01tl
|
|
radarr IN CNAME traefik-cl01tl
|
|
radarr-4k IN CNAME traefik-cl01tl
|
|
radarr-anime IN CNAME traefik-cl01tl
|
|
radarr-standup IN CNAME traefik-cl01tl
|
|
searxng IN CNAME traefik-cl01tl
|
|
slskd IN CNAME traefik-cl01tl
|
|
sonarr IN CNAME traefik-cl01tl
|
|
sonarr-4k IN CNAME traefik-cl01tl
|
|
sonarr-anime IN CNAME traefik-cl01tl
|
|
stalwart IN CNAME traefik-cl01tl
|
|
tautulli IN CNAME traefik-cl01tl
|
|
tdarr IN CNAME traefik-cl01tl
|
|
tubearchivist IN CNAME traefik-cl01tl
|
|
vault IN CNAME traefik-cl01tl
|
|
whodb IN CNAME traefik-cl01tl
|
|
yamtrack IN CNAME traefik-cl01tl
|
|
|
|
blocking:
|
|
denylists:
|
|
sus:
|
|
- https://v.firebog.net/hosts/static/w3kbl.txt
|
|
ads:
|
|
- https://v.firebog.net/hosts/AdguardDNS.txt
|
|
- https://v.firebog.net/hosts/Admiral.txt
|
|
- https://v.firebog.net/hosts/Easylist.txt
|
|
- https://adaway.org/hosts.txt
|
|
priv:
|
|
- https://v.firebog.net/hosts/Easyprivacy.txt
|
|
- https://v.firebog.net/hosts/Prigent-Ads.txt
|
|
mal:
|
|
- https://v.firebog.net/hosts/Prigent-Crypto.txt
|
|
- https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
|
|
pro:
|
|
- https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
|
|
allowlists:
|
|
sus:
|
|
- |
|
|
*.alexlebens.net
|
|
*.alexlebens.dev
|
|
*.boreal-beaufort.ts.net
|
|
ads:
|
|
- |
|
|
*.alexlebens.net
|
|
*.alexlebens.dev
|
|
*.boreal-beaufort.ts.net
|
|
priv:
|
|
- |
|
|
*.alexlebens.net
|
|
*.alexlebens.dev
|
|
*.boreal-beaufort.ts.net
|
|
mal:
|
|
- |
|
|
*.alexlebens.net
|
|
*.alexlebens.dev
|
|
*.boreal-beaufort.ts.net
|
|
pro:
|
|
- |
|
|
*.alexlebens.net
|
|
*.alexlebens.dev
|
|
*.boreal-beaufort.ts.net
|
|
clientGroupsBlock:
|
|
default:
|
|
- sus
|
|
- ads
|
|
- priv
|
|
- mal
|
|
- pro
|
|
blockType: zeroIp
|
|
blockTTL: 1m
|
|
loading:
|
|
refreshPeriod: 24h
|
|
downloads:
|
|
timeout: 60s
|
|
attempts: 5
|
|
cooldown: 10s
|
|
concurrency: 16
|
|
strategy: fast
|
|
maxErrorsPerSource: 5
|
|
|
|
caching:
|
|
minTime: 5m
|
|
maxTime: 30m
|
|
maxItemsCount: 0
|
|
prefetching: true
|
|
prefetchExpires: 2h
|
|
prefetchThreshold: 5
|
|
prefetchMaxItemsCount: 0
|
|
cacheTimeNegative: 30m
|
|
|
|
prometheus:
|
|
enable: true
|
|
path: /metrics
|
|
|
|
queryLog:
|
|
type: console
|
|
logRetentionDays: 7
|
|
creationAttempts: 1
|
|
creationCooldown: 2s
|
|
flushInterval: 30s
|
|
|
|
minTlsServeVersion: 1.3
|
|
|
|
ports:
|
|
dns: 53
|
|
http: 4000
|
|
|
|
log:
|
|
level: info
|
|
format: text
|
|
timestamp: true
|
|
privacy: false
|