Multiple additions and fixes #12

- Unbound ran as `nonrootuser`
- Readme updated
- auth.conf replaced by `USER` and `PASSWORD` env variables
- Removed Nginx section from readme for now
- Reworked entrypoint with more checks
- Malicious IPs and hostnames building is done at Docker build to gain time at launch
- docker-compose updated to reflect changes
This commit is contained in:
Quentin McGaw
2018-11-14 14:38:10 +02:00
parent 3c79ba33bb
commit d3dc6c74d8
5 changed files with 170 additions and 187 deletions

View File

@@ -2,8 +2,8 @@ server:
# See https://www.nlnetlabs.nl/documentation/unbound/unbound.conf/
# logging
verbosity: 0
val-log-level: 2
use-syslog: no
val-log-level: 0
use-syslog: yes
# performance
num-threads: 1
@@ -45,6 +45,8 @@ server:
do-ip4: yes
do-ip6: no
interface: 127.0.0.1
port: 53
username: "nonrootuser"
# other files
include: "/etc/unbound/blocks-malicious.conf"