docker
/
unbound
1
0
Fork 0
Code Issues Pull Requests Actions Packages Releases 4 Activity

Merge pull request 'Updated healthcheck' (#2) from improvement/healthcheck into master
Test / test_build (push) Successful in 18s Details 

Reviewed-on: #2
pull/3/head^2
Gertjan Krol 2023-11-07 20:43:41 +00:00
parent 9112ec6f5d c143c0e616
commit b72c6865a0
2 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
healthcheck.sh
View File

@ -1,7 +1,7 @@
#!/bin/sh #!/bin/sh
HEALTHCHECK_RECORD=healthcheck-record.gkcld HEALTHCHECK_RECORD=healthcheck.unbound
EXPECTED_VALUE=10.10.10.10 EXPECTED_VALUE=127.0.0.1
RESOLVED_IP=$(nslookup "${HEALTHCHECK_RECORD}" 127.0.0.1 | awk -F':' '/^Address: / { matched = 1 } matched { print $2}' | xargs) RESOLVED_IP=$(nslookup "${HEALTHCHECK_RECORD}" 127.0.0.1 | awk -F':' '/^Address: / { matched = 1 } matched { print $2}' | xargs)
if [ "${RESOLVED_IP}" != "${EXPECTED_VALUE}" ]; then if [ "${RESOLVED_IP}" != "${EXPECTED_VALUE}" ]; then

11
unbound.conf
View File

@ -2,6 +2,8 @@
include: /srv/unbound/conf/*.conf include: /srv/unbound/conf/*.conf
server: server:
do-daemonize: no
# If no logfile is specified, syslog is used # If no logfile is specified, syslog is used
#logfile: "/var/log/unbound/unbound.log" #logfile: "/var/log/unbound/unbound.log"
verbosity: 0 verbosity: 0
@ -13,6 +15,10 @@ server:
do-udp: yes do-udp: yes
do-tcp: yes do-tcp: yes
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
# You want to leave this to no unless you have *native* IPv6. With 6to4 and # You want to leave this to no unless you have *native* IPv6. With 6to4 and
# Terredo tunnels your web browser should favor IPv4 for the same reasons # Terredo tunnels your web browser should favor IPv4 for the same reasons
prefer-ip6: no prefer-ip6: no
@ -52,5 +58,6 @@ server:
# Allow from adguard subnet (see docker-compose adguard network) # Allow from adguard subnet (see docker-compose adguard network)
access-control: 0.0.0.0/0 allow access-control: 0.0.0.0/0 allow
# Local A record used for container healthcheck # Record used for container healthcheck
local-data: "healthcheck-record.gkcld. A 10.10.10.10" local-zone: "healthrecord.unbound" nodefault
local-data: "healthcheck.unbound. A 127.0.0.1"