mirror of
https://github.com/YunoHost-Apps/adguardhome_ynh.git
synced 2024-09-03 18:06:23 +02:00
enable DOH/DOQ using Let's Encrypt certs out of the box
This commit is contained in:
parent
93fee7c55e
commit
f91b08bdec
4 changed files with 24 additions and 7 deletions
|
@ -72,20 +72,20 @@ dns:
|
||||||
resolve_clients: true
|
resolve_clients: true
|
||||||
local_ptr_upstreams: []
|
local_ptr_upstreams: []
|
||||||
tls:
|
tls:
|
||||||
enabled: false
|
enabled: __DNS_OVER_HTTPS__
|
||||||
server_name: ""
|
server_name: "__DOMAIN__"
|
||||||
force_https: false
|
force_https: false
|
||||||
port_https: 443
|
port_https: 443
|
||||||
port_dns_over_tls: 853
|
port_dns_over_tls: __ADGUARD_DOT_PORT__
|
||||||
port_dns_over_quic: 784
|
port_dns_over_quic: __ADGUARD_DOQ_PORT__
|
||||||
port_dnscrypt: 0
|
port_dnscrypt: 0
|
||||||
dnscrypt_config_file: ""
|
dnscrypt_config_file: ""
|
||||||
allow_unencrypted_doh: __DNS_OVER_HTTPS__
|
allow_unencrypted_doh: false
|
||||||
strict_sni_check: false
|
strict_sni_check: false
|
||||||
certificate_chain: ""
|
certificate_chain: ""
|
||||||
private_key: ""
|
private_key: ""
|
||||||
certificate_path: ""
|
certificate_path: "/etc/yunohost/certs/__DOMAIN__/cert.pem"
|
||||||
private_key_path: ""
|
private_key_path: "/etc/yunohost/certs/__DOMAIN__/key.pem"
|
||||||
filters:
|
filters:
|
||||||
- enabled: true
|
- enabled: true
|
||||||
url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt
|
url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt
|
||||||
|
|
|
@ -54,6 +54,12 @@ ynh_add_nginx_config
|
||||||
|
|
||||||
#=================================================
|
#=================================================
|
||||||
# SPECIFIC SETUP
|
# SPECIFIC SETUP
|
||||||
|
#=================================================
|
||||||
|
|
||||||
|
# adding the adguardhome dedicated user to the 'ssl-cert' group to permit the
|
||||||
|
# use of the Let's Encrypt certs for DOT/DOQ
|
||||||
|
usermod -a -G "ssl-cert" "$app"
|
||||||
|
|
||||||
#=================================================
|
#=================================================
|
||||||
# ADD A CONFIGURATION
|
# ADD A CONFIGURATION
|
||||||
#=================================================
|
#=================================================
|
||||||
|
|
|
@ -13,6 +13,11 @@ source /usr/share/yunohost/helpers
|
||||||
#=================================================
|
#=================================================
|
||||||
# RESTORE THE APP MAIN DIR
|
# RESTORE THE APP MAIN DIR
|
||||||
#=================================================
|
#=================================================
|
||||||
|
|
||||||
|
# adding the adguardhome dedicated user to the 'ssl-cert' group to permit the
|
||||||
|
# use of the Let's Encrypt certs for DOT/DOQ
|
||||||
|
usermod -a -G "ssl-cert" "$app"
|
||||||
|
|
||||||
ynh_script_progression --message="Restoring the app main directory..." --weight=1
|
ynh_script_progression --message="Restoring the app main directory..." --weight=1
|
||||||
|
|
||||||
ynh_restore_file --origin_path="$install_dir"
|
ynh_restore_file --origin_path="$install_dir"
|
||||||
|
|
|
@ -80,6 +80,12 @@ yunohost service add $app --description="Ads & trackers blocking DNS server" --n
|
||||||
|
|
||||||
#=================================================
|
#=================================================
|
||||||
# SPECIFIC UPGRADE
|
# SPECIFIC UPGRADE
|
||||||
|
#=================================================
|
||||||
|
|
||||||
|
# adding the adguardhome dedicated user to the 'ssl-cert' group to permit the
|
||||||
|
# use of the Let's Encrypt certs for DOT/DOQ
|
||||||
|
usermod -a -G "ssl-cert" "$app"
|
||||||
|
|
||||||
#=================================================
|
#=================================================
|
||||||
# UPDATE A CONFIG FILE
|
# UPDATE A CONFIG FILE
|
||||||
#=================================================
|
#=================================================
|
||||||
|
|
Loading…
Add table
Reference in a new issue