Updates binary to latest upstream 2.0.19

- Also build only for arm64

Signed-off-by: MOVZX <movzx@yahoo.com>

README.md

@@ -3,7 +3,7 @@
 A flexible DNS proxy, with support for modern encrypted DNS protocols such as [DNSCrypt v2](https://github.com/DNSCrypt/dnscrypt-protocol/blob/master/DNSCRYPT-V2-PROTOCOL.txt) and [DNS-over-HTTP/2](https://tools.ietf.org/html/draft-ietf-doh-dns-over-https-03).
 
 ## Features
-- arm, arm64, x86 and x86_64 are supported.
+- For arm64 only
 - ipv4 and ipv6 are supported.
 - All binary files are downloaded from [https://github.com/jedisct1/dnscrypt-proxy/releases](https://github.com/jedisct1/dnscrypt-proxy/releases)
 

changelog.md

@@ -1,5 +1,8 @@
 # Changelog
 ## Changelog
+### v2.7.0
+- Update binary files to 2.0.19
+- Build for arm64 only
 ### v2.6.0
 - Update binary files to 2.0.17
 ### v2.5.0

config.sh

@@ -44,8 +44,9 @@ print_modname() {
   ui_print "        DNSCrypt-Proxy2        "
   ui_print "         Magisk Module         "
   ui_print "*******************************"
-  ui_print "             v2.6.0            "
+  ui_print "             v2.7.0            "
   ui_print "            bluemeda           "
+  ui_print "             MOVZX             "
   ui_print "*******************************"
 }
 
@@ -103,15 +104,7 @@ set_permissions() {
 # Make update-binary as clean as possible, try to only do function calls in it.
 
 install_dnscrypt_proxy(){
-  if [ "$ARCH" == "arm" ];then
-    BINARY_PATH=$INSTALLER/binary/dnscrypt-proxy-arm
-  elif [ "$ARCH" == "arm64" ];then
-    BINARY_PATH=$INSTALLER/binary/dnscrypt-proxy-arm64
-  elif [ "$ARCH" == "x86" ];then
-    BINARY_PATH=$INSTALLER/binary/dnscrypt-proxy-x86
-  elif [ "$ARCH" == "x64" ];then
-    BINARY_PATH=$INSTALLER/binary/dnscrypt-proxy-x86_64
-  fi
+  BINARY_PATH=$INSTALLER/binary/dnscrypt-proxy-arm64
 
   OLD_CONFIG_FILE=$MODDIR/system/etc/dnscrypt-proxy/dnscrypt-proxy.toml
   NEW_CONFIG_FILE=$MODPATH/system/etc/dnscrypt-proxy/dnscrypt-proxy.toml
@@ -131,10 +124,10 @@ install_dnscrypt_proxy(){
   mkdir -p $MODPATH/system/etc/dnscrypt-proxy 2>/dev/null
 
   if [ -f "$BINARY_PATH" ]; then
-    ui_print "* Copying binary for $ARCH"
+    ui_print "* Copying binary for arm64"
     cp -af $BINARY_PATH $MODPATH/system/xbin/dnscrypt-proxy
   else
-    abort "Binary file for $ARCH is missing!"
+    abort "Binary file for arm64 is missing!"
   fi
 
   if [ -d "$CONFIG_PATH" ]; then

config/example-dnscrypt-proxy.toml

@@ -27,7 +27,7 @@
 ## The proxy will automatically pick the fastest, working servers from the list.
 ## Remove the leading # first to enable this; lines starting with # are ignored.
 
-server_names = ['google', 'cisco', 'cloudflare']
+server_names = ['google', 'cloudflare', 'cisco']
 
 
 ## List of local addresses and ports to listen to. Can be IPv4 and/or IPv6.
@@ -41,14 +41,10 @@ listen_addresses = ['127.0.0.1:53']
 max_clients = 250
 
 
-## Switch to a non-privileged system user after listening sockets have been created.
-## Two processes will be running.
-## The first one will keep root privileges, but is only a supervisor, that does nothing
-## except create the sockets, manage the service, and restart it if it crashes.
-## The second process is the service itself, and that one will always run as a different
-## user.
+## Switch to a different system user after listening sockets have been created.
 ## Note (1): this feature is currently unsupported on Windows.
 ## Note (2): this feature is not compatible with systemd socket activation.
+## Note (3): when using -pidfile, the PID file directory must be writable by the new user
 
 # user_name = 'nobody'
 
@@ -81,21 +77,26 @@ require_nofilter = true
 
 
 ## Always use TCP to connect to upstream servers.
-## This can be can be useful if you need to route everything through Tor.
+## This can be useful if you need to route everything through Tor.
 ## Otherwise, leave this to `false`, as it doesn't improve security
 ## (dnscrypt-proxy will always encrypt everything even using UDP), and can
 ## only increase latency.
 
 force_tcp = false
 
 
-## HTTP / SOCKS proxy
+## SOCKS proxy
 ## Uncomment the following line to route all TCP connections to a local Tor node
 ## Tor doesn't support UDP, so set `force_tcp` to `true` as well.
 
 # proxy = "socks5://127.0.0.1:9050"
 
 
+## HTTP/HTTPS proxy
+## Only for DoH servers
+
+# http_proxy = "http://127.0.0.1:8888"
+
 
 ## How long a DNS query will wait for a response, in milliseconds
 
@@ -174,7 +175,7 @@ cert_refresh_delay = 240
 ## People in China may need to use 114.114.114.114:53 here.
 ## Other popular options include 8.8.8.8 and 1.1.1.1.
 
-fallback_resolver = '1.1.1.1:53'
+fallback_resolver = '9.9.9.9:53'
 
 
 ## Never let dnscrypt-proxy try to use the system DNS settings;
@@ -189,7 +190,7 @@ ignore_system_dns = false
 ## connectivity is not guaranteed to be immediately available.
 ## Use 0 to disable.
 
-netprobe_timeout = 30
+netprobe_timeout = 60
 
 
 ## Offline mode - Do not use any remote encrypted servers.
@@ -491,6 +492,15 @@ cache_neg_max_ttl = 600
   refresh_delay = 72
   prefix = ''
 
+  ## Quad9 over DNSCrypt - https://quad9.net/
+
+  # [sources.quad9-resolvers]
+  # urls = ["https://www.quad9.net/quad9-resolvers.md"]
+  # minisign_key = "RWQBphd2+f6eiAqBsvDZEBXBGHQBJfeG6G+wJPPKxCZMoEQYpmoysKUN"
+  # cache_file = "quad9-resolvers.md"
+  # refresh_delay = 72
+  # prefix = "quad9-"
+
   ## Another example source, with resolvers censoring some websites not appropriate for children
   ## This is a subset of the `public-resolvers` list, so enabling both is useless