Sign inSign up

gpocali/alpine-bind-with-dnscrypt

By gpocali

Updated over 5 years ago

Bind9 and DNScrypt-proxy on Alpine Linux including automatic generation of example configuration

Image
0

4.0K

gpocali/alpine-bind-with-dnscrypt repository overview

Alpine-bind-with-dnscrypt

bind and dnscrypt-proxy on Alpine Linux

Purpose

This docker is designed to be a light weight ISC BIND DNS implmentation with DNScrypt Proxy forwarding and validation checking for configuration and zone files.

Running Requirements

  • Volume:
  • /data
  • Ports:
  • TCP 53
  • UDP 53
  • Optional Port:
  • TCP 953 - Remote Control Port (set in named.conf.control)

Logging

  • Some logs are enabled by default for the local instance and are stored locally in the /data/log directory WARNING: Query Logging is enabled by default for confirmation of functionality. If you do not want logging, disable this before moving to production.
  • To disable Query Logging:
  • dnscrypt-proxy.toml
  • Add # to beginning of line 439
  • named.conf.logging
  • Add # to beginning of each line for 70-76

Notes

  • If RNDC file does not exist, a new file will be generated at launch
  • RNDC file is located at /data/rndc/rndc.conf so that it can be shared with other docker containers like ISC-DHCP
  • This key file is also used for internal automatic reload of zones when a zone file is closed after writing
  • named.conf.zones
  • If no zone file exists in /data, a zone file will be generated based on the contents of the zone folder but will not generate if there are errors in your zone files
  • named.conf.zones will not be replaced if it is modified
  • To automatically regenerate the file, delete it and restart the docker container
  • The example zone files will be created using the network information for the default network connection
  • Automatic update detection
  • Changes to the zone files will trigger a reload of all zone files which may take some time if the zones are complex
  • If new zones are added a full restart of the docker is required as this level of change is not monitored

Disclaimer

This docker is not designed to be anonymous nor to be a template of security for secure systems or sensitive data. This is designed to be a functional starting point for those who wish to setup a local DNS Server with DNScrypt forwarding in their environment. You are responsible for your own configuration and implementation of this docker.

Development

This is a work in progress. The core applications are the vanilla repository versions and issues with those should be directed toward the respective development teams.

Tag summary

Content type

Image

Digest

Size

23.2 MB

Last updated

over 5 years ago

docker pull gpocali/alpine-bind-with-dnscrypt