petersem/dnscrypt-proxy repository overview

⁠DNSCrypt-Proxy

A DNS server container which utilises several UK and European DNS over HTTPS resolution services (cloudflare, quad9-dnscrypt-ip4-nofilter-pri, quad9-dnscrypt-ip4-nofilter-alt, quad9-doh-ip4-filter-alt, quad9-doh-ip4-filter-pri, doh-crypto-sx, dnscrypt.uk-ipv4, cs-uk, v.dnscrypt.uk-ipv4) by utilizing DNSCrypt Proxy (https://github.com/jedisct1/dnscrypt-proxy⁠, https://dnscrypt.info/⁠).

Please note that the config file has DNS Cache disabled. This is due to my configuration of using Pihole as the DNS Cache. If you are not using a separate DNS cache system like Pihole, it is recommended to enable this in the config file under "DNS Cache".

In this config, tcp and udp port 53 must be free on the host:

docker run -dt --dns 127.0.0.1 -p 53:53/udp -p 53:53/tcp --name dnscrypt-proxy --restart unless-stopped modem7/dnscrypt-proxy

If you need it to listen on an alternate port:

docker run -dt --dns 127.0.0.1 -p 5353:53/udp -p 5353:53/tcp --name dnscrypt-proxy --restart unless-stopped modem7/dnscrypt-proxy

⁠Docker-compose

version: "2.4"

services:

  #DNSCrypt-Proxy - Non-caching, Non-logging, DNSSEC DNS Resolver
  dnscrypt-proxy:
    image: modem7/dnscrypt-proxy:latest
    container_name: Dnscrypt-proxy
    hostname: DNSCrypt
    dns:
      - 127.0.0.1
    ports:
      - "53:53"
    volumes:
      #- $USERDIR/DNSCrypt/dnscrypt-proxy.toml:/etc/dnscrypt-proxy/dnscrypt-proxy.toml # Uncomment if you want to define your own dnscrypt-proxy.toml file
      - /etc/localtime:/etc/localtime:ro
    restart: always
    mem_limit: 100m
    mem_reservation: 30m

⁠Modifications

If you want to modify the server list being used or other parameters you can clone the repo, modify the configuration files, build your own image, and run from that build.

Alternatively: Uncomment the value in volumes to substitute your own local configuration.

Clone Repo: git clone https://github.com/modem7/Dnscrypt-Proxy.git⁠

Modify DNSCrypt-Proxy config: dnscrypt/dnscrypt-proxy.toml

Modify servers to meet your needs, adjust other params if desired. For more detail around those settings, see: https://github.com/jedisct1/dnscrypt-proxy/wiki/Configuration-Sources⁠

Run the build:

docker build -f dnscrypt-proxy/Dockerfile dnscrypt-proxy/ -t dnscrypt-proxy-build

Run a container from the build:

docker run -dt --dns 127.0.0.1 -p 53:53/udp -p 53:53/tcp --name dnscrypt-proxy --restart unless-stopped dnscrypt-proxy-build

⁠Troubleshooting

If you run into issues after updating, remove the container and volume and recreate to get the latest config