From 1872c85a0fb77c2229c6de05ccafe9cd2f83e5f2 Mon Sep 17 00:00:00 2001 From: quindecim <49964366+quindecim@users.noreply.github.com> Date: Sat, 8 Apr 2023 16:17:23 +0200 Subject: [PATCH] Better description for ignore_system_dns https://github.com/DNSCrypt/dnscrypt-proxy/commit/b9f8f78c6e81ba82a27df1fe78f118ea0eb364df --- config/dnscrypt-proxy.toml | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/config/dnscrypt-proxy.toml b/config/dnscrypt-proxy.toml index 631a9a2..15b7965 100644 --- a/config/dnscrypt-proxy.toml +++ b/config/dnscrypt-proxy.toml @@ -258,7 +258,17 @@ dnscrypt_ephemeral_keys = true bootstrap_resolvers = ['45.11.45.11:53'] -## Always use the bootstrap resolver before the system DNS settings. +## When internal DNS resolution is required, for example to retrieve +## the resolvers list: +## +## - queries will be sent to dnscrypt-proxy itself, if it is already +## running with active servers (*) +## - or else, queries will be sent to fallback servers +## - finally, if `ignore_system_dns` is `false`, queries will be sent +## to the system DNS +## +## (*) this is incompatible with systemd sockets. +## `listen_addrs` must not be empty. ignore_system_dns = true