Post 9ktersOeWI3Z5SWefI by eo@masto.nixnet.xyz
 (DIR) More posts by eo@masto.nixnet.xyz
 (DIR) Post #9ksqcNLifvpAkAZL7o by sheogorath@microblog.shivering-isles.com
       2019-07-15T19:33:01Z
       
       0 likes, 1 repeats
       
       Setup my own DoH provider for my Firefox :)If you want to use it: go to about:config, search for network.trr.resolvers and overwrite the value with:[{ "name": "Cloudflare", "url": "https://mozilla.cloudflare-dns.com/dns-query" },{"name": "Shivering-Isles", "url": "https://dns.shivering-isles.com/dns-query"}]If you wonder how the stack looks like:https://git.shivering-isles.com/container-library/dns-over-httpsOn the production code:https://git.shivering-isles.com/shivering-isles/infrastructure/tree/master/roles/dns_over_https#DoH #Firefox #DNS #DNSoverHTTPS
       
 (DIR) Post #9kstwJL9aftTxoVAsy by rambeaucockius3@pl.smuglo.li
       2019-07-15T20:10:22.562094Z
       
       0 likes, 0 repeats
       
       @sheogorath Why should someone do this?
       
 (DIR) Post #9ksud7xBnjHN6Ki1dg by sheogorath@microblog.shivering-isles.com
       2019-07-15T20:17:57Z
       
       0 likes, 0 repeats
       
       @rambeaucockius3 Because you are bored? Because you enjoy DoH? Because you are curious? I don't know.I use it, because this way I control my DNS and all my devices use encrypted DNS lookups with a DNSSec enabled resolver.And I share the things I do. It's up to you to decide whenever it's useful or interesting for you or not.In best case I inspire you to build something awesome. In worst case no one cares. It's not on me to figure that out for you :)
       
 (DIR) Post #9kteg5Koafdhjs6lhA by eo@masto.nixnet.xyz
       2019-07-16T04:54:01Z
       
       0 likes, 0 repeats
       
       @sheogorathcc @amolith
       
 (DIR) Post #9ktersOeWI3Z5SWefI by eo@masto.nixnet.xyz
       2019-07-16T04:56:08Z
       
       0 likes, 0 repeats
       
       @sheogorathDo you use Unbound as your resolver?
       
 (DIR) Post #9ktfRU3OVH0U0vYr4q by sheogorath@microblog.shivering-isles.com
       2019-07-16T05:02:27Z
       
       0 likes, 0 repeats
       
       @eo yes, ubound is the resolver running in background, the frontend is done by a dns-over-https proxy written in go.
       
 (DIR) Post #9kuA0zJ5IJTlhhkJ2O by aladar@mastodon.xyz
       2019-07-16T10:45:09Z
       
       0 likes, 0 repeats
       
       @sheogorathEntrypoint.sh seems to be pointing to cloudflare and google dns, is that what you use or is that just left over from reference?
       
 (DIR) Post #9kuFFLyCKVNNoje65Y by sheogorath@microblog.shivering-isles.com
       2019-07-16T11:43:42Z
       
       0 likes, 0 repeats
       
       @aladar those are the fallback values when no upstream names are provided. The original upstream config configured those. So I put them there as default fallback so there is no notifiable difference to the pure upstream default config.The docker-compose file provides an UPSTREAM_NAME.