89 lines
2.8 KiB
Ruby
89 lines
2.8 KiB
Ruby
require 'formula'
|
|
|
|
class DnscryptProxy < Formula
|
|
homepage 'http://dnscrypt.org'
|
|
url 'http://download.dnscrypt.org/dnscrypt-proxy/dnscrypt-proxy-1.3.3.tar.bz2'
|
|
sha256 'd9aca5253b9fe0fd0bb756201e837d3b723c091e5be0eb3a81cf5432cedaec47'
|
|
|
|
head do
|
|
url 'https://github.com/opendns/dnscrypt-proxy.git', :branch => 'master'
|
|
|
|
depends_on :autoconf
|
|
depends_on :automake
|
|
depends_on :libtool
|
|
end
|
|
|
|
option "plugins", "Support plugins and install example plugins."
|
|
|
|
depends_on 'libsodium'
|
|
|
|
def install
|
|
system "autoreconf", "-if" if build.head?
|
|
|
|
args = ["--disable-dependency-tracking", "--prefix=#{prefix}"]
|
|
if build.include? "plugins"
|
|
args << "--enable-plugins"
|
|
args << "--enable-relaxed-plugins-permissions"
|
|
args << "--enable-plugins-root"
|
|
end
|
|
system "./configure", *args
|
|
system "make install"
|
|
end
|
|
|
|
def caveats; <<-EOS.undent
|
|
After starting dnscrypt-proxy, you will need to point your
|
|
local DNS server to 127.0.0.1. You can do this by going to
|
|
System Preferences > "Network" and clicking the "Advanced..."
|
|
button for your interface. You will see a "DNS" tab where you
|
|
can click "+" and enter 127.0.0.1 in the "DNS Servers" section.
|
|
|
|
By default, dnscrypt-proxy runs on localhost (127.0.0.1), port 53,
|
|
and under the "nobody" user using the default OpenDNS DNSCrypt-enabled
|
|
resolver. If you would like to change these settings (e.g., switching to
|
|
a DNSCrypt-enabled resolver with DNSSEC support), you will have to edit the
|
|
plist file (e.g., --resolver-address, --provider-name, --provider-key, etc.)
|
|
|
|
To check that dnscrypt-proxy is working correctly, open Terminal and enter the
|
|
following command:
|
|
|
|
dig txt debug.opendns.com
|
|
|
|
You should see a line in the result that looks like this:
|
|
|
|
debug.opendns.com. 0 IN TXT "dnscrypt enabled (......)"
|
|
|
|
Note: This will only work if you are using the default OpenDNS DNSCrypt-enabled
|
|
resolver. If you are using a different resolver, you can use a tool like tcpdump
|
|
to verify that everything is working correctly.
|
|
EOS
|
|
end
|
|
|
|
plist_options :startup => true
|
|
|
|
def plist; <<-EOS.undent
|
|
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE plist PUBLIC "-/Apple/DTD PLIST 1.0/EN" "http:/www.apple.com/DTDs/PropertyList-1.0.dtd">
|
|
<plist version="1.0">
|
|
<dict>
|
|
<key>Label</key>
|
|
<string>#{plist_name}</string>
|
|
<key>KeepAlive</key>
|
|
<true/>
|
|
<key>RunAtLoad</key>
|
|
<true/>
|
|
<key>ProgramArguments</key>
|
|
<array>
|
|
<string>#{opt_sbin}/dnscrypt-proxy</string>
|
|
<string>--user=nobody</string>
|
|
</array>
|
|
<key>UserName</key>
|
|
<string>root</string>
|
|
<key>StandardErrorPath</key>
|
|
<string>/dev/null</string>
|
|
<key>StandardOutPath</key>
|
|
<string>/dev/null</string>
|
|
</dict>
|
|
</plist>
|
|
EOS
|
|
end
|
|
end
|