2023-02-24 21:38:33 +01:00
|
|
|
# WARNING: Use this configuration for testing only!
|
|
|
|
|
|
2023-02-19 10:37:57 +01:00
|
|
|
[server]
|
|
|
|
|
# What port to listen on and where request are supposed to come from
|
|
|
|
|
listen_on = "127.0.0.1:3000"
|
|
|
|
|
|
|
|
|
|
# What header your reverse proxy sets that contains the real ip-address
|
|
|
|
|
# Possible Values: Every Vaiation of SecureClientIpSource in the axum_client_ip package
|
|
|
|
|
# https://docs.rs/axum-client-ip/latest/axum_client_ip/enum.SecureClientIpSource.html
|
|
|
|
|
#ip_header = "RightmostXForwardedFor"
|
|
|
|
|
# When you don't want to use a proxy server:
|
|
|
|
|
ip_header = "ConnectInfo"
|
|
|
|
|
|
2023-02-19 22:05:49 +01:00
|
|
|
# Allow querying of private range ips
|
|
|
|
|
# enable if you want to use this service
|
|
|
|
|
# on your internal network for some reason
|
|
|
|
|
allow_private_ip_lookup = true
|
|
|
|
|
|
2023-02-19 10:37:57 +01:00
|
|
|
[dns]
|
|
|
|
|
# Enable the /dig enpoint
|
|
|
|
|
allow_forward_lookup = true
|
|
|
|
|
|
|
|
|
|
# Enable reverse lookup, make sure to configure the hidden_suffixes
|
|
|
|
|
# to contain your locally used domains, to prevent onformation leakage
|
|
|
|
|
allow_reverse_lookup = true
|
|
|
|
|
|
|
|
|
|
# echoip-sltecave will pretend that domains
|
|
|
|
|
# that end with one of these suffixes don't exist
|
|
|
|
|
hidden_suffixes = [".com"]
|
|
|
|
|
|
|
|
|
|
[geoip]
|
|
|
|
|
# Path to geoip databses
|
|
|
|
|
# Currently only the mmdb format is supported
|
|
|
|
|
# Official databases can be obtained from maxmind.com
|
2023-02-24 00:01:51 +01:00
|
|
|
asn_database = "mmdb/GeoLite2-ASN.mmdb"
|
|
|
|
|
location_database = "mmdb/GeoLite2-City.mmdb"
|
2023-02-19 10:37:57 +01:00
|
|
|
|
|
|
|
|
# If anyone knows a free (as in freedom) groip database
|
|
|
|
|
# please open an issue so I can integrate it
|
|
|
|
|
# https://codeberg.org/slatian/service.echoip-slatecave
|
|
|
|
|
|
|
|
|
|
[template]
|
|
|
|
|
# Path to the template directory, can contain glob patterns
|
|
|
|
|
template_location = "templates"
|
2023-02-21 10:00:10 +01:00
|
|
|
|
|
|
|
|
# Prefixes of user agents that should get a text reponse by default
|
|
|
|
|
text_user_agents = ["curl/"]
|
2023-02-25 12:14:50 +01:00
|
|
|
|
|
|
|
|
[ratelimit]
|
|
|
|
|
# Configure a Quota for the Rate limiter
|
|
|
|
|
|
|
|
|
|
# Please note that this depends on the ip_header being
|
|
|
|
|
# configured correctly!
|
|
|
|
|
|
|
|
|
|
# How many requests per minute are allowed
|
|
|
|
|
# (How fast the leaky bucket drains)
|
|
|
|
|
per_minute = 20
|
|
|
|
|
# How many requests may come in at once
|
|
|
|
|
# (How much capacity the leaky bucket has)
|
|
|
|
|
burst = 15
|
|
|
|
|
|
|
|
|
|
#Note: The ratelimit is implemented using the governor crate
|
|
|
|
|
|
2023-08-04 00:00:21 +02:00
|
|
|
[dns.resolver.digitalcourage]
|
|
|
|
|
display_name = "Digitalcourage 3"
|
2023-08-05 21:09:56 +02:00
|
|
|
info_url = "https://digitalcourage.de/support/zensurfreier-dns-server"
|
|
|
|
|
aliases = ["dc","dc3","digitalcourage3"]
|
|
|
|
|
|
2023-08-04 00:00:21 +02:00
|
|
|
servers = ["5.9.164.112:853","[2a01:4f8:251:554::2]:853"]
|
2023-08-05 18:19:28 +02:00
|
|
|
protocol = "tls"
|
2023-08-04 00:00:21 +02:00
|
|
|
tls_dns_name = "dns3.digitalcourage.de"
|
2023-08-05 21:09:56 +02:00
|
|
|
|
