1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/adguardhome_ynh.git synced 2024-09-03 18:06:23 +02:00

enable DOH/DOQ using Let's Encrypt certs out of the box

This commit is contained in:
OniriCorpe 2023-12-26 05:28:26 +01:00
parent 93fee7c55e
commit f91b08bdec
4 changed files with 24 additions and 7 deletions

View file

@ -72,20 +72,20 @@ dns:
resolve_clients: true resolve_clients: true
local_ptr_upstreams: [] local_ptr_upstreams: []
tls: tls:
enabled: false enabled: __DNS_OVER_HTTPS__
server_name: "" server_name: "__DOMAIN__"
force_https: false force_https: false
port_https: 443 port_https: 443
port_dns_over_tls: 853 port_dns_over_tls: __ADGUARD_DOT_PORT__
port_dns_over_quic: 784 port_dns_over_quic: __ADGUARD_DOQ_PORT__
port_dnscrypt: 0 port_dnscrypt: 0
dnscrypt_config_file: "" dnscrypt_config_file: ""
allow_unencrypted_doh: __DNS_OVER_HTTPS__ allow_unencrypted_doh: false
strict_sni_check: false strict_sni_check: false
certificate_chain: "" certificate_chain: ""
private_key: "" private_key: ""
certificate_path: "" certificate_path: "/etc/yunohost/certs/__DOMAIN__/cert.pem"
private_key_path: "" private_key_path: "/etc/yunohost/certs/__DOMAIN__/key.pem"
filters: filters:
- enabled: true - enabled: true
url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt url: https://adguardteam.github.io/AdGuardSDNSFilter/Filters/filter.txt

View file

@ -54,6 +54,12 @@ ynh_add_nginx_config
#================================================= #=================================================
# SPECIFIC SETUP # SPECIFIC SETUP
#=================================================
# adding the adguardhome dedicated user to the 'ssl-cert' group to permit the
# use of the Let's Encrypt certs for DOT/DOQ
usermod -a -G "ssl-cert" "$app"
#================================================= #=================================================
# ADD A CONFIGURATION # ADD A CONFIGURATION
#================================================= #=================================================

View file

@ -13,6 +13,11 @@ source /usr/share/yunohost/helpers
#================================================= #=================================================
# RESTORE THE APP MAIN DIR # RESTORE THE APP MAIN DIR
#================================================= #=================================================
# adding the adguardhome dedicated user to the 'ssl-cert' group to permit the
# use of the Let's Encrypt certs for DOT/DOQ
usermod -a -G "ssl-cert" "$app"
ynh_script_progression --message="Restoring the app main directory..." --weight=1 ynh_script_progression --message="Restoring the app main directory..." --weight=1
ynh_restore_file --origin_path="$install_dir" ynh_restore_file --origin_path="$install_dir"

View file

@ -80,6 +80,12 @@ yunohost service add $app --description="Ads & trackers blocking DNS server" --n
#================================================= #=================================================
# SPECIFIC UPGRADE # SPECIFIC UPGRADE
#=================================================
# adding the adguardhome dedicated user to the 'ssl-cert' group to permit the
# use of the Let's Encrypt certs for DOT/DOQ
usermod -a -G "ssl-cert" "$app"
#================================================= #=================================================
# UPDATE A CONFIG FILE # UPDATE A CONFIG FILE
#================================================= #=================================================