Hardik
10b772807d
Sets up the complete self-hosted infrastructure on Voyager (HP t630 thin client): DNS Stack (dns/): - Pi-hole for network-wide ad blocking - Unbound as recursive DNS resolver - dnscrypt-proxy for DNS-over-HTTPS via Cloudflare/Quad9 Services: - Vaultwarden - self-hosted password manager (Bitwarden compatible) - Forgejo - self-hosted git mirror (primary on PMS1, mirror here) - Karakeep - self-hosted bookmark manager - Resilio Sync - P2P sync for PMS1 database backups Tunneling: - Newt - Pangolin tunnel client for exposing services via tunnel.pelagiamarine.com without open ports All services exposed externally via Pangolin reverse proxy on PMS1. Local DNS resolves through Pi-hole → Unbound → dnscrypt-proxy chain.
22 lines
454 B
Text
22 lines
454 B
Text
server:
|
|
verbosity: 1
|
|
interface: 0.0.0.0
|
|
port: 5335
|
|
do-ip4: yes
|
|
do-udp: yes
|
|
do-tcp: yes
|
|
do-ip6: no
|
|
access-control: 0.0.0.0/0 allow
|
|
root-hints: "/etc/unbound/root.hints"
|
|
harden-glue: yes
|
|
harden-dnssec-stripped: yes
|
|
use-caps-for-id: yes
|
|
edns-buffer-size: 1472
|
|
prefetch: yes
|
|
num-threads: 1
|
|
hide-identity: yes
|
|
hide-version: yes
|
|
|
|
forward-zone:
|
|
name: "."
|
|
forward-addr: 172.20.0.3@5053
|