diff --git a/docker-compose.yml b/docker-compose.yml index 2954392b..17e434a4 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -34,26 +34,49 @@ services: # Bind (DNS Server) # ------------------------------------------------------------ bind: - image: cytopia/bind:0.11 + image: cytopia/bind:0.14 restart: always ports: # [local-machine:]local-port:docker-port - - "${LOCAL_LISTEN_ADDR}${HOST_PORT_BIND:-1053}:53" + - "${LOCAL_LISTEN_ADDR}${HOST_PORT_BIND:-1053}:53/tcp" - "${LOCAL_LISTEN_ADDR}${HOST_PORT_BIND:-1053}:53/udp" environment: ## ## Debug? ## - - DEBUG_COMPOSE_ENTRYPOINT + - DEBUG_ENTRYPOINT=${DEBUG_COMPOSE_ENTRYPOINT} ## - ## Bind settings + ## Bind wildcard/host settings + ## + - WILDCARD_DNS=${TLD_SUFFIX:-loc}=172.16.238.11 + - EXTRA_HOSTS=${EXTRA_HOSTS} + + ## + ## Forwarding ## - - WILDCARD_DOMAIN=${TLD_SUFFIX:-loc} - - WILDCARD_ADDRESS=172.16.238.11 - DNS_FORWARDER=${BIND_DNS_RESOLVER:-8.8.8.8,8.8.4.4} + ## + ## Security + ## + - DNSSEC_VALIDATE=${BIND_DNSSEC_VALIDATE:-no} + + ## + ## Time settings + ## + - TTL_TIME=${BIND_TTL_TIME} + - REFRESH_TIME=${BIND_REFRESH_TIME} + - RETRY_TIME=${BIND_RETRY_TIME} + - EXPIRY_TIME=${BIND_EXPIRY_TIME} + - MAX_CACHE_TIME=${BIND_MAX_CACHE_TIME} + + ## + ## Query log + ## + - DOCKER_LOGS=${BIND_LOG_DNS_QUERIES} + dns: - 127.0.0.1 diff --git a/env-example b/env-example index d93970ed..2f89e8d0 100644 --- a/env-example +++ b/env-example @@ -86,6 +86,29 @@ LOCAL_LISTEN_ADDR= TLD_SUFFIX=loc +### +### Optional DNS configuration +### Allows you to add extra DNS records (above the wildcard entry) +### Useful if your host computer run other Docker services that you want to connect to or reach +### from within the Devilbox network by a custom hostname. +### +### Format: +### ------- +### Resolve any custom defined hostname to an IP address (useable inside container and host os) +### EXTRA_HOSTS==[,=] +### +### Resolve any custom defined hostname to whatever IP address a CNAME resolves to +### (Useable inside the container and host OS). +### Note: CNAME must be resolvable by Google DNS +### EXTRA_HOSTS==[,=] +### +### Examples: +### --------- +### EXTRA_HOSTS=hostname.loc=1.2.3.4 +### EXTRA_HOSTS=host.loc=1.2.3.4,host.example.org=3.4.5.6 +EXTRA_HOSTS= + + ### ### Set your user id and group id ### @@ -518,6 +541,35 @@ HOST_PORT_BIND=1053 ### BIND_DNS_RESOLVER=8.8.8.8,8.8.4.4 +### +### Validate DNSSEC +### +### Values: +### no: DNSSEC validation is disabled +### yes: DNSSEC validation is enabled, but a trust anchor must be manually configured. +### auto: DNSSEC validation is enabled, and a default trust anchor for root zone is used. +### +BIND_DNSSEC_VALIDATE=no + +### +### Bind timing options (time in seconds) +### +### Leave empty for defaults. +### Only change when you know what you are doing. +### +BIND_TTL_TIME= +BIND_REFRESH_TIME= +BIND_RETRY_TIME= +BIND_EXPIRY_TIME= +BIND_MAX_CACHE_TIME= + +### +### Show DNS Queries in Docker logs output? +### +### 1: Yes +### 0: No +BIND_LOG_DNS_QUERIES=0 + ################################################################################