dnscrypt-proxy.toml

# Core configuration
listen_addresses = ['0.0.0.0:53']
max_clients = 256

# Use servers reachable over IPv4
ipv4_servers = true

# Use servers reachable over IPv6 -- Do not enable if you don't have IPv6 connectivity
ipv6_servers = false

# Use servers implementing the DNSCrypt protocol
dnscrypt_servers = true

# Use servers implementing the DNS-over-HTTP/2 protocol
doh_servers = true

# Server must support DNS security extensions (DNSSEC)
require_dnssec = false

# Server must not log user queries (declarative)
require_nolog = true

# Server must not enforce its own blacklist (for parental control, ads blocking...)
require_nofilter = true

# Cache configuration
cache = true
cache_size = 4096
cache_min_ttl = 0
cache_max_ttl = 86400
cache_neg_min_ttl = 0
cache_neg_max_ttl = 60

# System DNS and fallback DNS
ignore_system_dns = true
bootstrap_resolvers = ['1.1.1.1:53']

# Logging optimised for a container
log_file = '/dev/stdout'
log_level = 2

# Sources configuration
[sources]

  [sources.'public-resolvers']
  urls = ['https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md', 'https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md']
  cache_file = 'public-resolvers.md'
  minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
  refresh_delay = 72
  prefix = ''