This is Ansible role installs and configures the DNSCrypt Proxy, a DNS proxy with support for encrypted DNS protocols.
None.
Variable | Default | Comments |
---|---|---|
dnscrypt_proxy_service_state |
started |
Set the service state (Possible values: started, restarted, stopped) |
dnscrypt_proxy_service_enabled |
true |
Enable/Disable the DNSCrypt Proxy service |
dnscrypt_proxy_service_restart_on_change |
true |
Restart DNSCrypt Proxy service on configuration changes. |
dnscrypt_proxy_config |
{} |
Dictionary (key-value pairs) of DNSCrypt Proxy configuration options. The role provides some sane defaults and is configured to work with quad9 (see: vars/main.yml ).A list of all available options can be found in the example configuration. Just make sure to use YAML syntax instead of the TOML. |
None.
- hosts: all
vars:
dnscrypt_proxy_config:
sources:
quad9-resolvers:
urls:
- https://www.quad9.net/quad9-resolvers.md
cache_file: quad9-resolvers.md
minisign_key: RWQBphd2+f6eiAqBsvDZEBXBGHQBJfeG6G+wJPPKxCZMoEQYpmoysKUN
prefix: 'quad9-'
dnscrypt_servers: true
doh_servers: true
require_dnssec: false
require_nolog: true
require_nofilter: true
cache: true
cache_size: 4096
cache_min_ttl: 2400
cache_max_ttl: 86400
roles:
- aisbergg.dnscrypt-proxy
MIT
Andre Lehmann ([email protected])