upstream: default: - 1.1.1.1 - 1.0.0.1 quad9: - 9.9.9.9 - 149.112.112.112 - 2620:fe::fe - 2620:fe::9 - https://dns.quad9.net/dns-query - tls://dns.quad9.net quad9-unsecured: - 9.9.9.10 - 149.112.112.10 - 2620:fe::10 - 2620:fe::fe:10 - https://dns10.quad9.net/dns-query - tcp-tls:dns10.quad9.net blocking: blackLists: ads: - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts - http://sysctl.org/cameleon/hosts - https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt - https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt - https://hosts-file.net/ad_servers.txt smarttv: - https://perflyst.github.io/PiHoleBlocklist/SmartTV.txt - https://perflyst.github.io/PiHoleBlocklist/regex.list malware: - https://mirror1.malwaredomains.com/files/justdomains whiteLists: # Move to Gitea when deployed internally ads: {{ keyOrDefault "blocky/whitelists/ads" "# None" | indent 6 }} clientGroupsBlock: default: - ads - malware - smarttv customDNS: customTTL: 1h mapping: {{ with service "traefik" -}} {{- $last := len . | subtract 1 -}} {{- $services := . -}} {{ keyOrDefault "global/base_hostname" "${base_hostname}" }}: {{ range $i := loop $last -}} {{- with index $services $i }}{{ .Address }},{{ end -}} {{- end -}} {{- with index . $last }}{{ .Address }}{{ end -}} {{- end }} {{ with service "whoami" -}} {{- $last := len . | subtract 1 -}} {{- $services := . -}} whoami: {{ range $i := loop $last -}} {{- with index $services $i }}{{ .Address }},{{ end -}} {{- end -}} {{- with index . $last }}{{ .Address }}{{ end -}} {{- end }} # Other mappings {{ keyOrDefault "blocky/mappings" "# None" | indent 4 }} prometheus: enable: true redis: address: {{ env "NOMAD_UPSTREAM_ADDR_redis" }} # password: "" # database: 0 connectionAttempts: 10 connectionCooldown: 3s # queryLog: # type: mysql # target: db_user:db_password@tcp(db_host_or_ip:3306)/db_user?charset=utf8mb4&parseTime=True&loc=Local # logRetentionDays: 7 port: 53 httpPort: 4000