1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
# ddns DNS-over-HTTP/3 server configuration
# All fields are optional; the values shown below are the built-in defaults.
# Bind patterns to listen on. Dual-stack service is expressed explicitly.
= ["0.0.0.0:4433", "[::]:4433"]
# TLS server name (SNI).
= "dns.genmeta.net"
# Paths to the server TLS certificate and private key (PEM format).
= "~/Downloads/ssl/dns.genmeta.net/dns.genmeta.net.pem"
= "~/Downloads/ssl/dns.genmeta.net/dns.genmeta.net.key"
# Root CA that signed the client certificates (PEM format).
= "~/Downloads/ssl/root.crt"
# Whether to require a valid DNS record signature on Standard domains.
= true
# Default TTL (seconds) for published records.
= 30
# Redis URL for persistent storage.
# If omitted, records are kept in memory only (lost on restart).
# redis = "redis://127.0.0.1/"
# ---------------------------------------------------------------------------
# Domain policy rules
#
# Policies are matched in order; the first matching rule wins.
# Domains not listed here use the built-in "standard" policy.
#
# Policies:
# standard — one record per host; client cert SAN must match the target
# host; signature check controlled by require_signature above;
# each publish overwrites the previous record.
#
# open_multi — any authenticated node may publish; no signature check;
# records are appended (not overwritten), each with its own
# individual TTL; lookup returns newest-first, use ?limit=N
# to cap the number of returned records.
# ---------------------------------------------------------------------------
[[]]
= "nat.genmeta.net"
= "open_multi"
# Static bootstrap STUN endpoints returned even before any node publishes.
# Ordering keeps the main :20002 endpoints ahead of the auxiliary :20003 endpoints.
[[]]
= "nat.genmeta.net"
= []
# Add more rules as needed, e.g.:
# [[domain_policies]]
# host = "relay.genmeta.net"
# policy = "open_multi"