dearsky/numa
1
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases 25 Wiki Activity

feat: enable DoT listener by default

Browse Source 
DoT now starts automatically with `sudo numa`, matching the proxy and
DoH which are already on by default. The self-signed CA infrastructure
is shared with the proxy, so there is no additional setup. This makes
`numa setup-phone` work out of the box.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Razvan Dimescu
2026-04-11 04:01:18 +03:00
parent bec3b53830
commit 730c400ddb
2 changed files with 6 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
numa.toml
View File

@@ -93,7 +93,7 @@ tld = "numa"
# DNS-over-TLS listener (RFC 7858) — encrypted DNS on port 853 # DNS-over-TLS listener (RFC 7858) — encrypted DNS on port 853
# [dot] # [dot]
# enabled = false # opt-in: accept DoT queries # enabled = true # on by default; set false to disable
# port = 853 # standard DoT port # port = 853 # standard DoT port
# bind_addr = "0.0.0.0" # IPv4 or IPv6; unspecified binds all interfaces # bind_addr = "0.0.0.0" # IPv4 or IPv6; unspecified binds all interfaces
# cert_path = "/etc/numa/dot.crt" # PEM cert; omit to use self-signed (proxy CA if available) # cert_path = "/etc/numa/dot.crt" # PEM cert; omit to use self-signed (proxy CA if available)

7
src/config.rs
View File

@@ -411,7 +411,7 @@ pub struct DnssecConfig {
#[derive(Deserialize, Clone)] #[derive(Deserialize, Clone)]
pub struct DotConfig { pub struct DotConfig {
#[serde(default)] #[serde(default = "default_dot_enabled")]
pub enabled: bool, pub enabled: bool,
#[serde(default = "default_dot_port")] #[serde(default = "default_dot_port")]
pub port: u16, pub port: u16,
@@ -428,7 +428,7 @@ pub struct DotConfig {
impl Default for DotConfig { impl Default for DotConfig {
fn default() -> Self { fn default() -> Self {
DotConfig { DotConfig {
enabled: false, enabled: default_dot_enabled(),
port: default_dot_port(), port: default_dot_port(),
bind_addr: default_dot_bind_addr(), bind_addr: default_dot_bind_addr(),
cert_path: None, cert_path: None,
@@ -437,6 +437,9 @@ impl Default for DotConfig {
} }
} }
fn default_dot_enabled() -> bool {
true
}
fn default_dot_port() -> u16 { fn default_dot_port() -> u16 {
853 853
} }