# Empty listen_addresses to use systemd socket activation
listen_addresses = ['127.0.0.1:53']
server_names = ['cloudflare', 'cloudflare-ipv6', 'google']
doh_servers = true


###########################################################
#        Pattern-based IP blocking (IP blocklists)        #
###########################################################

## IP blocklists are made of one pattern per line. Example of valid patterns:
## 
##   127.*
##   fe80:abcd:*
##   192.168.1.4

[blocked_ips]

## Path to the file of blocking rules (absolute, or relative to the same directory as the config file)

blocked_ips_file = '/etc/dnscrypt-proxy/blocked-ips.txt'


## Optional path to a file logging blocked queries

# log_file = '/var/log/blocked-ips.log'


## Optional log format: tsv or ltsv (default: tsv)

# log_format = 'tsv'


[query_log]
  file = '/var/log/dnscrypt-proxy/query.log'

[nx_log]
  file = '/var/log/dnscrypt-proxy/nx.log'

[sources]
  [sources.'public-resolvers']
  url = 'https://download.dnscrypt.info/resolvers-list/v2/public-resolvers.md'
  cache_file = '/var/cache/dnscrypt-proxy/public-resolvers.md'
  minisign_key = 'RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3'
  refresh_delay = 72
  prefix = ''

