cjones/sysconfig
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

DNS changes: remove global configuration from resolved.conf; add access control and view specification for Docker networks to unbound.conf.

Browse Source
This commit is contained in:
cjones
2026-10-11 20:28:08 -04:00
parent c3a59de697
commit 39a87feaf2
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
devices/teal/config/etc/systemd/resolved.conf
+2 -2
View File
@@ -21,8 +21,8 @@
# Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com # Cloudflare: 1.1.1.1#cloudflare-dns.com 1.0.0.1#cloudflare-dns.com 2606:4700:4700::1111#cloudflare-dns.com 2606:4700:4700::1001#cloudflare-dns.com
# Google: 8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google # Google: 8.8.8.8#dns.google 8.8.4.4#dns.google 2001:4860:4860::8888#dns.google 2001:4860:4860::8844#dns.google
# Quad9: 9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net # Quad9: 9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
DNS=192.168.88.231 192.168.88.40 #DNS=192.168.88.231 192.168.88.40
Domains=~objectbrokers.com #Domains=~objectbrokers.com
#DNSSEC=no #DNSSEC=no
#DNSOverTLS=no #DNSOverTLS=no
#MulticastDNS=no #MulticastDNS=no
devices/teal/config/usr/local/etc/unbound/unbound.conf
+6
View File
@@ -27,16 +27,22 @@
private-address: 100.64.0.0/10 private-address: 100.64.0.0/10
# addresses from the IP range that are allowed to connect to the resolver # addresses from the IP range that are allowed to connect to the resolver
# local physical LAN
access-control: 192.168.88.0/24 allow access-control: 192.168.88.0/24 allow
# explicitly allow localhost access # explicitly allow localhost access
access-control: 127.0.0.0/8 allow access-control: 127.0.0.0/8 allow
# allow Tailnet # allow Tailnet
access-control: 100.64.0.0/10 allow access-control: 100.64.0.0/10 allow
# Docker bridge networks (default pool)
access-control: 172.16.0.0/12 allow
access-control: 192.168.0.0/16 allow
# uncomment the following line to allow Tailnet IPv6 # uncomment the following line to allow Tailnet IPv6
# access-control: fd7a:115c:a1e0::/48 allow # access-control: fd7a:115c:a1e0::/48 allow
access-control-view: 192.168.88.0/24 lan access-control-view: 192.168.88.0/24 lan
access-control-view: 100.64.0.0/10 tailnet access-control-view: 100.64.0.0/10 tailnet
access-control-view: 172.16.0.0/12 lan
access-control-view: 192.168.0.0/16 lan
access-control-view: 127.0.0.0/8 lan access-control-view: 127.0.0.0/8 lan
do-ip4: yes do-ip4: yes