recommend config #86

Closed
opened 2026-04-12 21:13:31 +08:00 by mybigman · 1 comment
mybigman commented 2026-04-12 21:13:31 +08:00 (Migrated from github.com)

do you have a recommended config?

do you have a recommended config?
razvandimescu commented 2026-04-13 06:11:22 +08:00 (Migrated from github.com)

The default config that ships with numa install works out of the box — it auto-detects your system DNS and forwards to it. For a more opinionated setup:

[upstream]
mode = "forward"
address = ["https://9.9.9.9/dns-query"]   # Quad9 DoH (encrypted, malware-blocking)
fallback = ["https://1.1.1.1/dns-query"]   # Cloudflare as backup
# hedge_ms = 10                            # request hedging (default: 10ms, 0 to disable)

[cache]
max_entries = 100000
min_ttl = 60
max_ttl = 86400
warm = ["google.com", "github.com"]        # pre-resolve at startup

[blocking]
enabled = true
lists = ["https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.txt"]

[dot]
enabled = true                             # accept encrypted DNS from phones/other devices

If you want recursive resolution (no upstream dependency, resolve from root):

[upstream]
mode = "recursive"

[dnssec]
enabled = true

Full config reference with all options documented: numa.toml

The default config that ships with `numa install` works out of the box — it auto-detects your system DNS and forwards to it. For a more opinionated setup: ```toml [upstream] mode = "forward" address = ["https://9.9.9.9/dns-query"] # Quad9 DoH (encrypted, malware-blocking) fallback = ["https://1.1.1.1/dns-query"] # Cloudflare as backup # hedge_ms = 10 # request hedging (default: 10ms, 0 to disable) [cache] max_entries = 100000 min_ttl = 60 max_ttl = 86400 warm = ["google.com", "github.com"] # pre-resolve at startup [blocking] enabled = true lists = ["https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/hosts/pro.txt"] [dot] enabled = true # accept encrypted DNS from phones/other devices ``` If you want recursive resolution (no upstream dependency, resolve from root): ```toml [upstream] mode = "recursive" [dnssec] enabled = true ``` Full config reference with all options documented: [`numa.toml`](https://github.com/razvandimescu/numa/blob/main/numa.toml)
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dearsky/numa#86