149 lines
4.5 KiB
YAML
149 lines
4.5 KiB
YAML
blocky:
|
|
controllers:
|
|
main:
|
|
type: deployment
|
|
replicas: 1
|
|
strategy: Recreate
|
|
revisionHistoryLimit: 3
|
|
containers:
|
|
main:
|
|
image:
|
|
repository: spx01/blocky
|
|
tag: v0.24@sha256:9a82e0235c52ef3048586f8006add06e52132adaae70d02f980569dae16421a2
|
|
pullPolicy: IfNotPresent
|
|
env:
|
|
- name: TZ
|
|
value: US/Central
|
|
resources:
|
|
requests:
|
|
cpu: 100m
|
|
memory: 128Mi
|
|
serviceAccount:
|
|
create: true
|
|
configMaps:
|
|
config:
|
|
enabled: true
|
|
data:
|
|
config.yml: |
|
|
upstreams:
|
|
init:
|
|
strategy: fast
|
|
groups:
|
|
default:
|
|
- tcp-tls:1.1.1.1:853
|
|
- tcp-tls:1.0.0.1:853
|
|
strategy: parallel_best
|
|
timeout: 2s
|
|
|
|
connectIPVersion: v4
|
|
|
|
blocking:
|
|
denylists:
|
|
sus:
|
|
- https://v.firebog.net/hosts/static/w3kbl.txt
|
|
- https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt
|
|
- https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Spam/hosts
|
|
ads:
|
|
- https://v.firebog.net/hosts/AdguardDNS.txt
|
|
- https://v.firebog.net/hosts/Admiral.txt
|
|
- https://v.firebog.net/hosts/Easylist.txt
|
|
- https://adaway.org/hosts.txt
|
|
- https://raw.githubusercontent.com/anudeepND/blacklist/master/adservers.txt
|
|
- https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext
|
|
- https://raw.githubusercontent.com/FadeMind/hosts.extras/master/UncheckyAds/hosts
|
|
- https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts
|
|
priv:
|
|
- https://v.firebog.net/hosts/Easyprivacy.txt
|
|
- https://v.firebog.net/hosts/Prigent-Ads.txt
|
|
- https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.2o7Net/hosts
|
|
- https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt
|
|
- https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt
|
|
mal:
|
|
- https://v.firebog.net/hosts/Prigent-Crypto.txt
|
|
- https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt
|
|
- https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
|
|
- https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts
|
|
clientGroupsBlock:
|
|
default:
|
|
- sus
|
|
- ads
|
|
- priv
|
|
- mal
|
|
blockType: zeroIp
|
|
blockTTL: 1m
|
|
loading:
|
|
refreshPeriod: 24h
|
|
downloads:
|
|
timeout: 60s
|
|
attempts: 5
|
|
cooldown: 10s
|
|
concurrency: 16
|
|
strategy: fast
|
|
maxErrorsPerSource: 5
|
|
|
|
caching:
|
|
minTime: 5m
|
|
maxTime: 30m
|
|
maxItemsCount: 0
|
|
prefetching: true
|
|
prefetchExpires: 2h
|
|
prefetchThreshold: 5
|
|
prefetchMaxItemsCount: 0
|
|
cacheTimeNegative: 30m
|
|
|
|
prometheus:
|
|
enable: true
|
|
path: /metrics
|
|
|
|
queryLog:
|
|
type: console
|
|
logRetentionDays: 7
|
|
creationAttempts: 1
|
|
creationCooldown: 2s
|
|
flushInterval: 30s
|
|
|
|
minTlsServeVersion: 1.3
|
|
|
|
ports:
|
|
dns: 53
|
|
http: 4000
|
|
|
|
log:
|
|
level: info
|
|
format: text
|
|
timestamp: true
|
|
privacy: false
|
|
service:
|
|
main:
|
|
controller: main
|
|
annotations:
|
|
tailscale.com/expose: "true"
|
|
ports:
|
|
tcp:
|
|
port: 53
|
|
targetPort: 53
|
|
protocol: TCP
|
|
udp:
|
|
port: 53
|
|
targetPort: 53
|
|
protocol: UDP
|
|
metrics:
|
|
controller: main
|
|
ports:
|
|
metrics:
|
|
port: 4000
|
|
targetPort: 4000
|
|
protocol: TCP
|
|
persistence:
|
|
config:
|
|
enabled: true
|
|
type: configMap
|
|
name: blocky-config
|
|
advancedMounts:
|
|
main:
|
|
main:
|
|
- path: /app/config.yml
|
|
readOnly: true
|
|
mountPropagation: None
|
|
subPath: config.yml
|