Have our own DNS provider

[Kcchouette]

Or exactly a local dns forwarder forwarding dns requests via dnscrypt to an external resolver like opennic

• [ ] Create a new script that can be launch from OpenVPN.sh
• [ ] See https://github.com/Fusl/opennic-tier2-installer for example
  • it will install a dns resolver (powerdns) and configure dnscrypt wrapper ("server"), you should however look into firewalling dns port (udp/53) so the server is not abused for attacks
  • considering I only want to use dnscrypt, I should completely firewall it in the powerdns config (allow only from localhost) and only accept requests over dnscrypt from external
  • powerdns here instead of dnsmask (or bind)
    • its way faster and more powerful than bind and dnsmasq - bind is bloated and slow and dnsmasq does not have the featureset, also dnsmasq is a dns forwarder, not a recursor (the difference between a forwarder and recursor is trivial in our case - forwarder means, you forward your dns requests to another dns resolver (e.g. google, opennic, opendns, ...) while the recursor does the resolving of domains by itself)

[Kcchouette]

https://github.com/Angristan/OpenVPN-install-fork-old/compare/master...yolateng0:master

[Kcchouette]

See https://github.com/pl48415/openvpn-install-advanced/blob/master/openvpn-install-advanced.sh too

[Kcchouette]

https://github.com/angristan/openvpn-install/commit/f057e0aa5f0cb9d9eacade8224c0a6d53af09ebe