feat: DoH server endpoint + DoT enabled by default #79

Merged
razvandimescu merged 5 commits from feat/cache-warming into main 2026-04-11 09:06:17 +08:00
2 changed files with 6 additions and 3 deletions
Showing only changes of commit 730c400ddb - Show all commits

View File

@@ -93,7 +93,7 @@ tld = "numa"
# DNS-over-TLS listener (RFC 7858) — encrypted DNS on port 853 # DNS-over-TLS listener (RFC 7858) — encrypted DNS on port 853
# [dot] # [dot]
# enabled = false # opt-in: accept DoT queries # enabled = true # on by default; set false to disable
# port = 853 # standard DoT port # port = 853 # standard DoT port
# bind_addr = "0.0.0.0" # IPv4 or IPv6; unspecified binds all interfaces # bind_addr = "0.0.0.0" # IPv4 or IPv6; unspecified binds all interfaces
# cert_path = "/etc/numa/dot.crt" # PEM cert; omit to use self-signed (proxy CA if available) # cert_path = "/etc/numa/dot.crt" # PEM cert; omit to use self-signed (proxy CA if available)

View File

@@ -411,7 +411,7 @@ pub struct DnssecConfig {
#[derive(Deserialize, Clone)] #[derive(Deserialize, Clone)]
pub struct DotConfig { pub struct DotConfig {
#[serde(default)] #[serde(default = "default_dot_enabled")]
pub enabled: bool, pub enabled: bool,
#[serde(default = "default_dot_port")] #[serde(default = "default_dot_port")]
pub port: u16, pub port: u16,
@@ -428,7 +428,7 @@ pub struct DotConfig {
impl Default for DotConfig { impl Default for DotConfig {
fn default() -> Self { fn default() -> Self {
DotConfig { DotConfig {
enabled: false, enabled: default_dot_enabled(),
port: default_dot_port(), port: default_dot_port(),
bind_addr: default_dot_bind_addr(), bind_addr: default_dot_bind_addr(),
cert_path: None, cert_path: None,
@@ -437,6 +437,9 @@ impl Default for DotConfig {
} }
} }
fn default_dot_enabled() -> bool {
true
}
fn default_dot_port() -> u16 { fn default_dot_port() -> u16 {
853 853
} }