Pi-hole/pi-hole
Pi-hole/pi-hole
1
0
Fork 0
mirror of https://github.com/pi-hole/pi-hole.git synced 2025-01-26 06:19:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

Updated DNSCrypt 2.0 (markdown)

Flaxe 2018-04-25 18:55:13 +02:00
parent ed647600eb
commit 5219f61356
1 changed files with 6 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
DNSCrypt-2.0.md

@ -7,14 +7,14 @@ This can probably replace the DNSCrypt page, but leaving it for archive purposes
## Step 1: Install DNSCrypt-Proxy
* `cd /opt`: Move to /opt directory. This is where we will place the dnscrypt-proxy files.
* Download [latest](https://github.com/jedisct1/dnscrypt-proxy/releases/latest) pre-built binary. I'm using Pi-Hole on ARM architecture, so I used `linux_arm`. Replace with your system architecture.
* `tar -xf dnscrypt-proxy-linux_arm64-2.0.8.tar.gz`: Extract prebuilt binary
* `mv linux-arm64 dnscrypt-proxy`: Rename the extracted folder
* `rm dnscrypt-proxy-linux_arm64-2.0.8.tar.gz`: Remove the archive
* Download the [latest](https://github.com/jedisct1/dnscrypt-proxy/releases/latest) pre-built binary. I'm using Pi-Hole on Linux x86_64 architecture, so I'll use `linux_x86_64`. Replace with your system architecture, you can check which you use by running `uname -sm`.
* `tar -xf dnscrypt-proxy-linux_x86_64-2.0.10.tar.gz`: Extract prebuilt binary
* `mv linux-x86_64 dnscrypt-proxy`: Rename the extracted folder
* `rm dnscrypt-proxy-linux_x86_64-2.0.10.tar.gz`: Remove the archive
* `cd dnscrypt-proxy`: cd into extracted dir
* `cp example-dnscrypt-proxy.toml dnscrypt-proxy.toml`: Create a configuration file based on the example one
* `sudo nano dnscrypt-proxy.toml`: Edit the toml file. This is where all the fancy configuration happens.
* Edit port to be something other than `53` (since `53` is being used by Pi-Hole). This is the `listen_addresses` line. Change both IPv4 and IPv6 as desired.
* In the `listen_addresses` line, edit port to be something other than `53` (since `53` is being used by Pi-Hole). I'll use port 5353 in this example. You can also change both IPv4 and IPv6 as desired.
* Edit other settings as desired. I set `require_dnssec` to be `true`. There are a lot of other options, but server selection and more is already done. If you want to specify the server(s) you want to use, look at [this site](https://dnscrypt.info/public-servers).
* `./dnscrypt-proxy -service install`: install dnscrypt-proxy service
* `./dnscrypt-proxy -service start`: start the new service
@ -33,7 +33,7 @@ Also see the [wiki](https://github.com/jedisct1/dnscrypt-proxy/wiki/DNS-server-s
These instructions are the [same](https://github.com/pi-hole/pi-hole/wiki/DNSCrypt#change-your-dnsmasq-config), but will copy them here.
* `sudo nano /etc/dnsmasq.d/02-dnscrypt.conf`: Create new or edit existing conf.
* Change `server=<IP>#<port>` where `dnscrypt-proxy` is running. For example, my `.toml` file is `listen_addresses = ['127.0.0.1:54', '[::1]:54']`, so edit the conf file to be `server=127.0.0.1#54`
* Change `server=<IP>#<port>` where `dnscrypt-proxy` is running. For example, my `.toml` file is `listen_addresses = ['127.0.0.1:5353', '[::1]:5353']`, so edit the conf file to be `server=127.0.0.1#5353`
* `sudo nano /etc/pihole/setupVars.conf`: Edit setupVars.conf.
* Comment out `#PIHOLE_DNS#=` lines.
* `sudo nano /etc/dnsmasq.d/01-pihole.conf`