Adguard Home + Docker + Nginx. DoH не работает

mercurykd

New Member
Не нашел темы для adguard home, т.к подключаюсь с винды напишу сюда.
Проблема следующая:
- если запустить AGH в докере, пробросив порт 443 на хост(ubuntu) то настроенный DoH в винде работает и веб морда AGH работает
YAML:
ad:
        image: adguard/adguardhome
        volumes:
            - ./config/.profile:/root/.bashrc:ro
            - ./config/adguard/work:/opt/adguardhome/work
            - ./config/adguard/conf:/opt/adguardhome/conf
            - ./app/logs/:/logs/
        hostname: adguard
        ports:
            - 443:443
- если спрятать AGH за nginx, то веб морда работает, а вот DoH уже нет
YAML:
ad:
        image: adguard/adguardhome
        volumes:
            - ./config/.profile:/root/.bashrc:ro
            - ./config/adguard/work:/opt/adguardhome/work
            - ./config/adguard/conf:/opt/adguardhome/conf
            - ./app/logs/:/logs/
        hostname: adguard
        networks:
            default:
                ipv4_address: 10.10.0.5
    ng:
        image: nginx:stable
        volumes:
            - ./config/.profile:/root/.bashrc:ro
            - ./config/nginx.conf:/etc/nginx/nginx.conf
            - ./certs/:/certs/
            - ./app/logs/:/var/log/nginx
        hostname: nginx
        ports:
            - 443:443
        networks:
            default:
                ipv4_address: 10.10.0.6
nginx
INI:
server {
        listen       443 ssl;
        server_name  mydomain.com;
        server_tokens off;

        ssl_certificate /certs/letsencrypt;
        ssl_certificate_key /certs/letsencrypt_key;

        location / {
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-Host $host;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_set_header X-Forwarded-Proto $scheme;
            proxy_set_header X-Forwarded-Protocol $scheme;
            proxy_pass https://10.10.0.5/;
        }
    }
причем утилитой dog(https://github.com/ogham/dog) пробивается, но ответ долгий, секунд 15 думает
INI:
2023/01/08 00:13:45.756285 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.(*Proxy).ServeHTTP(): Incoming HTTPS request on /dns-query
2023/01/08 00:13:45.756363 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.remoteAddr(): Using IP address from HTTP request: 128.71.127.32
2023/01/08 00:13:45.756401 1#86 [debug] request came from proxy server 10.10.0.6:58108
2023/01/08 00:13:45.756446 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.(*Proxy).logDNSMessage(): IN: ;; opcode: QUERY, status: NOERROR, id: 63555
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version 0; flags: ; udp: 512

;; QUESTION SECTION:
;ya.ru.    IN     A

2023/01/08 00:13:45.756511 1#86 [debug] applying filters: looking for client with ip 128.71.127.32 and clientid ""
2023/01/08 00:13:45.756574 1#86 [debug] applying filters: no clients with ip 128.71.127.32 and clientid ""
2023/01/08 00:13:45.756632 1#86 [debug] hosts container: handling the request
2023/01/08 00:13:45.756725 1#86 [debug] dnsproxy: cache: serving cached response
2023/01/08 00:13:45.756763 1#86 [debug] dnsforward: checking A 87.250.250.242 for ya.ru.
2023/01/08 00:13:45.756825 1#86 [debug] client ip: 128.71.127.32
2023/01/08 00:13:45.756908 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.(*Proxy).logDNSMessage(): OUT: ;; opcode: QUERY, status: NOERROR, id: 63555
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version 0; flags: ; udp: 512

;; QUESTION SECTION:
;ya.ru.    IN     A

;; ANSWER SECTION:
ya.ru.    273    IN    A    87.250.250.242
еще вопросик: из консоли можно посылать команду на перечитывание конфига?
 
Top