docker-compose.yml

# git clone https://github.com/devops-from-root/dnscrypt-proxy.git && cd dnscrypt-proxy && docker network inspect dns_network >/dev/null 2>&1 || docker network create --driver=bridge --subnet=10.10.10.0/24 --gateway=10.10.10.1 dns_network && docker compose up -d --build

name: dnscrypt-proxy

services:
  dnscrypt-proxy:
    container_name: dnscrypt-proxy
    image: ghcr.io/devops-from-root/dnscrypt-proxy:main
    #image: dnscrypt-proxy
    #build:
      #context: https://github.com/devops-from-root/dnscrypt-proxy.git
      #context: ${PWD}/.
      #dockerfile: Dockerfile
      #args:
        #- BUILD_OPTIONS=--no-cache
    network_mode: "host"
    healthcheck:
      test: ["CMD", "nc", "-zv", "localhost", "53"]
      interval: 30s
      timeout: 5s
      retries: 3
      start_period: 90s
    restart: unless-stopped
    
# systemctl stop systemd-resolved && systemctl disable systemd-resolved && echo -e "nameserver 127.0.0.1\noptions $(ip -4 route ls | grep default | grep -Po '(?<=dev )(\S+)' | head -1)" > /etc/resolv.conf && chattr +i /etc/resolv.conf