Skip to content

Commit 23d7a15

Browse files
authored
fix(https-dns-proxy): patched default config, disabling service (#1237)
Moved package from installed by default to build only due to process not easy to disable without patching the default configuration. Package will be added back when we implement DoH/DoT for the whole firewall. Documentation has been provided on how to manually add the package.
1 parent 908ae9d commit 23d7a15

File tree

2 files changed

+8
-8
lines changed

2 files changed

+8
-8
lines changed

config/dnsmasq.conf

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,4 +10,4 @@ CONFIG_PACKAGE_dnsmasq_full_conntrack=y
1010
CONFIG_PACKAGE_dnsmasq_full_noid=y
1111
# CONFIG_PACKAGE_dnsmasq_full_broken_rtc is not set
1212
CONFIG_PACKAGE_dnsmasq_full_tftp=y
13-
CONFIG_PACKAGE_https-dns-proxy=y
13+
CONFIG_PACKAGE_https-dns-proxy=m

docs/design/doh_dot.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -9,14 +9,14 @@ parent: Design
99
You can provide the standard DHCP instance with a forward to DNS-over-TLS (DOT) and DNS-over-HTTPs (DOH) servers.
1010
This is done by using the [`https-dns-proxy`](https://openwrt.org/docs/guide-user/services/dns/doh_dnsmasq_https-dns-proxy).
1111

12-
By default, the proxy listens to the `127.0.0.1:5053` address. The configuration for the service can be found at the
13-
following link: https://docs.openwrt.melmac.net/https-dns-proxy
14-
15-
To start the service and enable it to automatically start at boot, run the following command:
12+
The package can be installed using the following command:
1613

1714
```bash
18-
/etc/init.d/https-dns-proxy enable
19-
/etc/init.d/https-dns-proxy start
15+
opkg install https-dns-proxy
2016
```
2117

22-
This will start the service, edit the dnsmasq configuration automatically and restart the services needed.
18+
By default, the proxy listens to the `127.0.0.1:5053` and `127.0.0.1:5054` addresses. The configuration for the service can be found at the
19+
following link: https://docs.openwrt.melmac.net/https-dns-proxy
20+
21+
the tool will edit the dnsmasq configuration automatically, takes care of keeping it up to date, and restart the
22+
services if any changes happen.

0 commit comments

Comments
 (0)