Rewrite of the entrypoint in Golang (#71)

- General improvements
    - Parallel download of only needed files at start
    - Prettier console output with all streams merged (openvpn, unbound, shadowsocks etc.)
    - Simplified Docker final image
    - Faster bootup
- DNS over TLS
    - Finer grain blocking at DNS level: malicious, ads and surveillance
    - Choose your DNS over TLS providers
    - Ability to use multiple DNS over TLS providers for DNS split horizon
    - Environment variables for DNS logging
    - DNS block lists needed are downloaded and built automatically at start, in parallel
- PIA
    - A random region is selected if the REGION parameter is left empty (thanks @rorph for your PR)
    - Routing and iptables adjusted so it can work as a Kubernetes pod sidecar (thanks @rorph for your PR)

docker-compose.yml

@@ -21,18 +21,19 @@ services:
       - ENCRYPTION=strong
       - PROTOCOL=udp
       - REGION=CA Montreal
-      - NONROOT=no
       - DOT=on
+      - DOT_PROVIDERS=cloudflare
       - BLOCK_MALICIOUS=on
-      - BLOCK_NSA=off
+      - BLOCK_SURVEILLANCE=off
+      - BLOCK_ADS=off
       - UNBLOCK=
-      - FIREWALL=on
       - EXTRA_SUBNETS=
-      - TINYPROXY=on
-      - TINYPROXY_LOG=Critical
+      - TINYPROXY=off
+      - TINYPROXY_LOG=Info
       - TINYPROXY_USER=
       - TINYPROXY_PASSWORD=
-      - SHADOWSOCKS=on
+      - SHADOWSOCKS=off
       - SHADOWSOCKS_LOG=on
+      - SHADOWSOCKS_PORT=8388
       - SHADOWSOCKS_PASSWORD=
     restart: always