Не нашел темы для adguard home, т.к подключаюсь с винды напишу сюда.
Проблема следующая:
- если запустить AGH в докере, пробросив порт 443 на хост(ubuntu) то настроенный DoH в винде работает и веб морда AGH работает
- если спрятать AGH за nginx, то веб морда работает, а вот DoH уже нет
nginx
причем утилитой dog(https://github.com/ogham/dog) пробивается, но ответ долгий, секунд 15 думает
еще вопросик: из консоли можно посылать команду на перечитывание конфига?
Проблема следующая:
- если запустить AGH в докере, пробросив порт 443 на хост(ubuntu) то настроенный DoH в винде работает и веб морда AGH работает
YAML:
ad:
image: adguard/adguardhome
volumes:
- ./config/.profile:/root/.bashrc:ro
- ./config/adguard/work:/opt/adguardhome/work
- ./config/adguard/conf:/opt/adguardhome/conf
- ./app/logs/:/logs/
hostname: adguard
ports:
- 443:443
YAML:
ad:
image: adguard/adguardhome
volumes:
- ./config/.profile:/root/.bashrc:ro
- ./config/adguard/work:/opt/adguardhome/work
- ./config/adguard/conf:/opt/adguardhome/conf
- ./app/logs/:/logs/
hostname: adguard
networks:
default:
ipv4_address: 10.10.0.5
ng:
image: nginx:stable
volumes:
- ./config/.profile:/root/.bashrc:ro
- ./config/nginx.conf:/etc/nginx/nginx.conf
- ./certs/:/certs/
- ./app/logs/:/var/log/nginx
hostname: nginx
ports:
- 443:443
networks:
default:
ipv4_address: 10.10.0.6
INI:
server {
listen 443 ssl;
server_name mydomain.com;
server_tokens off;
ssl_certificate /certs/letsencrypt;
ssl_certificate_key /certs/letsencrypt_key;
location / {
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header X-Forwarded-Protocol $scheme;
proxy_pass https://10.10.0.5/;
}
}
INI:
2023/01/08 00:13:45.756285 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.(*Proxy).ServeHTTP(): Incoming HTTPS request on /dns-query
2023/01/08 00:13:45.756363 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.remoteAddr(): Using IP address from HTTP request: 128.71.127.32
2023/01/08 00:13:45.756401 1#86 [debug] request came from proxy server 10.10.0.6:58108
2023/01/08 00:13:45.756446 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.(*Proxy).logDNSMessage(): IN: ;; opcode: QUERY, status: NOERROR, id: 63555
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version 0; flags: ; udp: 512
;; QUESTION SECTION:
;ya.ru. IN A
2023/01/08 00:13:45.756511 1#86 [debug] applying filters: looking for client with ip 128.71.127.32 and clientid ""
2023/01/08 00:13:45.756574 1#86 [debug] applying filters: no clients with ip 128.71.127.32 and clientid ""
2023/01/08 00:13:45.756632 1#86 [debug] hosts container: handling the request
2023/01/08 00:13:45.756725 1#86 [debug] dnsproxy: cache: serving cached response
2023/01/08 00:13:45.756763 1#86 [debug] dnsforward: checking A 87.250.250.242 for ya.ru.
2023/01/08 00:13:45.756825 1#86 [debug] client ip: 128.71.127.32
2023/01/08 00:13:45.756908 1#86 [debug] github.com/AdguardTeam/dnsproxy/proxy.(*Proxy).logDNSMessage(): OUT: ;; opcode: QUERY, status: NOERROR, id: 63555
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version 0; flags: ; udp: 512
;; QUESTION SECTION:
;ya.ru. IN A
;; ANSWER SECTION:
ya.ru. 273 IN A 87.250.250.242