mo
21dbee4b53
Compose files and configs for postgres, adguard, duckdns, homarr, neo4j, portainer, remotely, and monitoring; RESTORE.md and sync-from-nas script. Sanitize pgAdmin secrets; document homelab-command as separate repo. Co-authored-by: Cursor <cursoragent@cursor.com>
345 lines
8.7 KiB
YAML
345 lines
8.7 KiB
YAML
http:
|
||
pprof:
|
||
port: 6060
|
||
enabled: false
|
||
address: 192.168.1.211:3001
|
||
session_ttl: 720h
|
||
users:
|
||
- name: mo
|
||
password: $2a$10$hTko3Z04gyjeG1PwE1AIDObRmamgNOGzH9b66G/FRK75HIhVjhILO
|
||
auth_attempts: 5
|
||
block_auth_min: 15
|
||
http_proxy: ""
|
||
language: ""
|
||
theme: auto
|
||
dns:
|
||
bind_hosts:
|
||
- 0.0.0.0
|
||
port: 53
|
||
anonymize_client_ip: false
|
||
ratelimit: 20
|
||
ratelimit_subnet_len_ipv4: 24
|
||
ratelimit_subnet_len_ipv6: 56
|
||
ratelimit_whitelist: []
|
||
refuse_any: true
|
||
upstream_dns:
|
||
- https://dns10.quad9.net/dns-query
|
||
upstream_dns_file: ""
|
||
bootstrap_dns:
|
||
- 9.9.9.10
|
||
- 149.112.112.10
|
||
- 2620:fe::10
|
||
- 2620:fe::fe:10
|
||
fallback_dns: []
|
||
upstream_mode: load_balance
|
||
fastest_timeout: 1s
|
||
allowed_clients: []
|
||
disallowed_clients: []
|
||
blocked_hosts:
|
||
- version.bind
|
||
- id.server
|
||
- hostname.bind
|
||
trusted_proxies:
|
||
- 127.0.0.0/8
|
||
- ::1/128
|
||
cache_enabled: true
|
||
cache_size: 4194304
|
||
cache_ttl_min: 0
|
||
cache_ttl_max: 0
|
||
cache_optimistic: false
|
||
cache_optimistic_answer_ttl: 30s
|
||
cache_optimistic_max_age: 12h
|
||
bogus_nxdomain: []
|
||
aaaa_disabled: false
|
||
enable_dnssec: false
|
||
edns_client_subnet:
|
||
custom_ip: ""
|
||
enabled: false
|
||
use_custom: false
|
||
max_goroutines: 300
|
||
handle_ddr: true
|
||
ipset: []
|
||
ipset_file: ""
|
||
bootstrap_prefer_ipv6: false
|
||
upstream_timeout: 10s
|
||
private_networks: []
|
||
use_private_ptr_resolvers: true
|
||
local_ptr_upstreams: []
|
||
use_dns64: false
|
||
dns64_prefixes: []
|
||
serve_http3: false
|
||
use_http3_upstreams: false
|
||
serve_plain_dns: true
|
||
hostsfile_enabled: true
|
||
pending_requests:
|
||
enabled: true
|
||
tls:
|
||
enabled: false
|
||
server_name: ""
|
||
force_https: false
|
||
port_https: 443
|
||
port_dns_over_tls: 853
|
||
port_dns_over_quic: 853
|
||
port_dnscrypt: 0
|
||
dnscrypt_config_file: ""
|
||
allow_unencrypted_doh: false
|
||
certificate_chain: ""
|
||
private_key: ""
|
||
certificate_path: ""
|
||
private_key_path: ""
|
||
strict_sni_check: false
|
||
querylog:
|
||
dir_path: ""
|
||
ignored: []
|
||
interval: 2160h
|
||
size_memory: 1000
|
||
enabled: true
|
||
ignored_enabled: false
|
||
file_enabled: true
|
||
statistics:
|
||
dir_path: ""
|
||
ignored: []
|
||
interval: 24h
|
||
enabled: true
|
||
ignored_enabled: false
|
||
filters:
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt
|
||
name: AdGuard DNS filter
|
||
id: 1
|
||
- enabled: false
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_2.txt
|
||
name: AdAway Default Blocklist
|
||
id: 2
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_34.txt
|
||
name: HaGeZi's Normal Blocklist
|
||
id: 1771582373
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_48.txt
|
||
name: HaGeZi's Pro Blocklist
|
||
id: 1771582374
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_51.txt
|
||
name: HaGeZi's Pro++ Blocklist
|
||
id: 1771582375
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_29.txt
|
||
name: 'CHN: AdRules DNS List'
|
||
id: 1771582376
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_21.txt
|
||
name: 'CHN: anti-AD'
|
||
id: 1771582377
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_35.txt
|
||
name: 'HUN: Hufilter'
|
||
id: 1771582378
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_22.txt
|
||
name: 'IDN: ABPindo'
|
||
id: 1771582379
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_19.txt
|
||
name: 'IRN: PersianBlocker list'
|
||
id: 1771582380
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_43.txt
|
||
name: 'ISR: EasyList Hebrew'
|
||
id: 1771582381
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_25.txt
|
||
name: 'KOR: List-KR DNS'
|
||
id: 1771582382
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_15.txt
|
||
name: 'KOR: YousList'
|
||
id: 1771582383
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_36.txt
|
||
name: 'LIT: EasyList Lithuania'
|
||
id: 1771582384
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_20.txt
|
||
name: 'MKD: Macedonian Pi-hole Blocklist'
|
||
id: 1771582385
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_13.txt
|
||
name: 'NOR: Dandelion Sprouts nordiske filtre'
|
||
id: 1771582386
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_41.txt
|
||
name: 'POL: CERT Polska List of malicious domains'
|
||
id: 1771582387
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_14.txt
|
||
name: 'POL: Polish filters for Pi-hole'
|
||
id: 1771582388
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_17.txt
|
||
name: 'SWE: Frellwit''s Swedish Hosts File'
|
||
id: 1771582389
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_26.txt
|
||
name: 'TUR: turk-adlist'
|
||
id: 1771582390
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_40.txt
|
||
name: 'TUR: Turkish Ad Hosts'
|
||
id: 1771582391
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_16.txt
|
||
name: 'VNM: ABPVN List'
|
||
id: 1771582392
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_30.txt
|
||
name: Phishing URL Blocklist (PhishTank and OpenPhish)
|
||
id: 1771582393
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_18.txt
|
||
name: Phishing Army
|
||
id: 1771582394
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_9.txt
|
||
name: The Big List of Hacked Malware Web Sites
|
||
id: 1771582395
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_50.txt
|
||
name: uBlock₀ filters – Badware risks
|
||
id: 1771582396
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_11.txt
|
||
name: Malicious URL Blocklist (URLHaus)
|
||
id: 1771582397
|
||
- enabled: true
|
||
url: https://adguardteam.github.io/HostlistsRegistry/assets/filter_47.txt
|
||
name: HaGeZi's Gambling Blocklist
|
||
id: 1771582398
|
||
whitelist_filters: []
|
||
user_rules:
|
||
- '@@||g.live.com^$important'
|
||
- '@@||ashemaletube.com^$client=''192.168.1.235'''
|
||
- '@@||o540343.ingest.sentry.io^$important'
|
||
- '@@||console.bce.baidu.com^$important'
|
||
- ""
|
||
dhcp:
|
||
enabled: false
|
||
interface_name: ""
|
||
local_domain_name: lan
|
||
dhcpv4:
|
||
gateway_ip: ""
|
||
subnet_mask: ""
|
||
range_start: ""
|
||
range_end: ""
|
||
lease_duration: 86400
|
||
icmp_timeout_msec: 1000
|
||
options: []
|
||
dhcpv6:
|
||
range_start: ""
|
||
lease_duration: 86400
|
||
ra_slaac_only: false
|
||
ra_allow_slaac: false
|
||
filtering:
|
||
blocking_ipv4: ""
|
||
blocking_ipv6: ""
|
||
blocked_services:
|
||
schedule:
|
||
time_zone: UTC
|
||
ids:
|
||
- 4chan
|
||
- 500px
|
||
- 9gag
|
||
- activision_blizzard
|
||
- amino
|
||
- battle_net
|
||
- betano
|
||
- betfair
|
||
- betway
|
||
- blaze
|
||
- blizzard_entertainment
|
||
- bluesky
|
||
- douban
|
||
- electronic_arts
|
||
- epic_games
|
||
- facebook
|
||
- gog
|
||
- instagram
|
||
- io_interactive
|
||
- kook
|
||
- leagueoflegends
|
||
- line
|
||
- mail_ru
|
||
- minecraft
|
||
- nintendo
|
||
- odysee
|
||
- ok
|
||
- onlyfans
|
||
- origin
|
||
- playstation
|
||
- plenty_of_fish
|
||
- qq
|
||
- riot_games
|
||
- rockstar_games
|
||
- snapchat
|
||
- steam
|
||
- tiktok
|
||
- tinder
|
||
- tumblr
|
||
- ubisoft
|
||
- valorant
|
||
- vk
|
||
- wargaming
|
||
- warnerbrosgames
|
||
- wizz
|
||
- xboxlive
|
||
- zhihu
|
||
protection_disabled_until: null
|
||
safe_search:
|
||
enabled: true
|
||
bing: true
|
||
duckduckgo: true
|
||
ecosia: true
|
||
google: true
|
||
pixabay: true
|
||
yandex: true
|
||
youtube: true
|
||
blocking_mode: default
|
||
parental_block_host: family-block.dns.adguard.com
|
||
safebrowsing_block_host: standard-block.dns.adguard.com
|
||
rewrites: []
|
||
safe_fs_patterns:
|
||
- /opt/adguardhome/work/userfilters/*
|
||
safebrowsing_cache_size: 1048576
|
||
safesearch_cache_size: 1048576
|
||
parental_cache_size: 1048576
|
||
cache_time: 30
|
||
filters_update_interval: 24
|
||
blocked_response_ttl: 10
|
||
filtering_enabled: true
|
||
rewrites_enabled: true
|
||
parental_enabled: false
|
||
safebrowsing_enabled: true
|
||
protection_enabled: true
|
||
clients:
|
||
runtime_sources:
|
||
whois: true
|
||
arp: true
|
||
rdns: true
|
||
dhcp: true
|
||
hosts: true
|
||
persistent: []
|
||
log:
|
||
enabled: true
|
||
file: ""
|
||
max_backups: 0
|
||
max_size: 100
|
||
max_age: 3
|
||
compress: false
|
||
local_time: false
|
||
verbose: false
|
||
os:
|
||
group: ""
|
||
user: ""
|
||
rlimit_nofile: 0
|
||
schema_version: 33
|