# 【记录】自建去广告的DoH服务器

Last updated on March 19, 2024 pm

## 进行部署

- 反代服务

    1
    2
    3
    4
    5

    mkdir -p ~/app/adguard && cd ~/app/adguard && nano docker-compose.yml
    sudo docker-compose up -d # 面板端口 3000
    # /opt/adguardhome/letsencrypt/live/npm-1/fullchain.pem
    # /opt/adguardhome/letsencrypt/live/npm-1/privkey.pem
    sed -i 's/allow_unencrypted_doh: false/allow_unencrypted_doh: true/' ./conf/AdGuardHome.yaml && sudo docker-compose restart

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15

    version: '3.3'
    services:
      adguard:
        restart: unless-stopped
        volumes:
          - './work:/opt/adguardhome/work'
          - './conf:/opt/adguardhome/conf'
          - '/root/base/NGPM/letsencrypt:/opt/adguardhome/letsencrypt'
          - '/etc/localtime:/etc/localtime:ro'
        image: adguard/adguardhome:latest

    networks:
      default:
        external: true
        name: ngpm

## DNS设置

- 导航栏-设置-DNS设置
- DNS 服务配置中启用DNSSEC

## DoH设置

- 导航栏-设置-DNS设置
- 加密中启用加密
- 证书可以设置为npm自动申请的证书
- 反代 `/dns-query`, `token`保密不要泄露
- `token`后面没有`/`, `dns-query`后面有`/`
- 在chrome的设置-隐私和安全-安全-DNS中填入`https://my.com/token`
- 回到仪表盘，看看有没有记录到DNS查询

#docker #ngpm #DoH
【记录】自建去广告的DoH服务器
https://hexo.limour.top/Self-built-ad-blocking-DoH-server
Author
Limour
Posted on
October 28, 2023
Updated on
March 19, 2024
Licensed under
【探索】基于WebSocket的内网穿透工具 Previous
【探索】基于QUIC的内网穿透协议 Next

#### Search

Keyword