[confgen] use 2-phase secured DoT for clients

lirundong · Feb 6, 2024 · 230012f · 230012f
1 parent 96f7136
commit 230012f
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/conf-gen/generator/sing_box_generator.py b/conf-gen/generator/sing_box_generator.py
@@ -144,6 +144,7 @@ def from_base(cls, base_object: Self, dns, inbounds, route, experimental):
                 tag = new_server["tag"]
                 old_servers.setdefault(tag, {}).clear()
                 old_servers[tag].update(new_server)
+            new_object.dns["servers"] = list(old_servers.values())
         new_object.inbounds = inbounds
         new_object.route.update(route)
         if experimental is None:

diff --git a/conf-gen/source.yaml b/conf-gen/source.yaml
@@ -647,9 +647,14 @@ generates:
   base: *SING_BOX_CONF_BASE
   dns:
     servers:
-    - address: tls://1.12.12.12
+    - tag: &BOOTSTRAP_DNS bootstrap
+      address: https://1.12.12.12/dns-query
+      detour: DIRECT
+    - tag: DIRECT
+      address: tls://dot-a328bfed.dot.pub
+      address_resolver: *BOOTSTRAP_DNS
+      address_strategy: prefer_ipv4
       detour: DIRECT
-      tag: DIRECT
   inbounds:
   - tag: tun
     type: tun