:wrench: An Ansible role to install and configure the DNS Privacy stub resolver Stubby.
aisbergg.stubby
This is Ansible role installs and configures the DNS Privacy stub resolver Stubby.
NOTE: Rather use dnscrypt-proxy instead of stubby, because it has a larger community and offers more features. So checkout my Ansible role for dnscrypt-proxy.
None.
Variable | Default | Comments |
---|---|---|
stubby_service_state |
started |
Set the service state (Possible values: started, reloaded, restarted, stopped) |
stubby_service_enabled |
true |
Enable/Disable the Stubby service |
stubby_config |
{} |
Dictionary of Stubby configuration variables (key-value pairs). A list of available variables and their documentation can be found in vars/main.yml . |
None.
- hosts: all
vars:
stubby_service_state: started
stubby_service_enabled: true
stubby_config:
upstream_recursive_servers:
# Quad 9 'secure' service - Filters, does DNSSEC, doesn't send ECS
- address_data: 9.9.9.9
tls_auth_name: "dns.quad9.net"
- address_data: 2620:fe::fe
tls_auth_name: "dns.quad9.net"
roles:
- aisbergg.stubby
MIT
Andre Lehmann (aisberg@posteo.de)