mirror of
https://github.com/dnscrypt/dnscrypt-server-docker
synced 2024-04-28 13:45:05 +02:00
8d0f779bfe
Removed --net=host as default for the docker container It does forward port 443 tcp/udp to the host, but it also had "--net=host" when starting. That defeats the purpose of the port forward. Removing "--net=host" as it is also in line with the rest of the documentation.
72 lines
1.8 KiB
Bash
72 lines
1.8 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
set -x
|
|
|
|
yum -y update
|
|
|
|
SERVER="$(hostname)"
|
|
export SERVER
|
|
SERVER_IP="$(ip route get 1 | awk '{print $NF;exit}')"
|
|
export SERVER_IP
|
|
echo "$SERVER"
|
|
echo "$SERVER_IP"
|
|
|
|
(
|
|
exec 2>/dev/null
|
|
|
|
if ! [ -x "$(command -v docker)" ]; then
|
|
yum install -y docker
|
|
fi
|
|
|
|
docker stop dnscrypt-server
|
|
docker stop watchtower
|
|
docker rm dnscrypt-server
|
|
docker rm watchtower
|
|
docker container prune -f
|
|
docker volume prune -f
|
|
docker image prune -f
|
|
|
|
yum remove -y firewalld
|
|
yum remove -y iptables-services
|
|
)
|
|
|
|
mkdir -p /etc/dnscrypt-server/lists
|
|
if [ -d /root/keys ]; then
|
|
mv /root/keys /etc/dnscrypt-server
|
|
fi
|
|
mkdir -p /etc/dnscrypt-server/keys
|
|
|
|
if [ -f /etc/dnscrypt-server/keys/state/encrypted-dns.state ]; then
|
|
docker run \
|
|
--ulimit nofile=90000:90000 \
|
|
-v /etc/dnscrypt-server/keys:/opt/encrypted-dns/etc/keys \
|
|
-v /etc/dnscrypt-server/lists:/opt/encrypted-dns/etc/lists \
|
|
--name=dnscrypt-server -p 443:443/udp -p 443:443/tcp \
|
|
-d jedisct1/dnscrypt-server start
|
|
else
|
|
docker run \
|
|
--ulimit nofile=90000:90000 \
|
|
-v /etc/dnscrypt-server/keys:/opt/encrypted-dns/etc/keys \
|
|
-v /etc/dnscrypt-server/lists:/opt/encrypted-dns/etc/lists \
|
|
--name=dnscrypt-server -p 443:443/udp -p 443:443/tcp \
|
|
jedisct1/dnscrypt-server init -N "$SERVER" -E "${SERVER_IP}:443"
|
|
docker start dnscrypt-server
|
|
fi
|
|
|
|
cat /etc/dnscrypt-server/keys/provider-info.txt
|
|
|
|
docker update --restart=unless-stopped dnscrypt-server
|
|
|
|
docker run -d --name watchtower -v /var/run/docker.sock:/var/run/docker.sock containrrr/watchtower dnscrypt-server
|
|
docker update --restart=unless-stopped watchtower
|
|
|
|
ln -sf /etc/dnscrypt-server/keys /root
|
|
|
|
echo 3 >/proc/sys/vm/drop_caches
|
|
|
|
if [ ! -L /etc/motd ]; then
|
|
rm -f /etc/motd
|
|
ln -s /etc/dnscrypt-server/keys/provider-info.txt /etc/motd
|
|
reboot
|
|
fi
|