# nxdns configuration

# Database path
database = "/etc/nxdns/nxdns.db"

[upstream]
# Upstream DNS servers (DoH or DoT)
servers = ["https://cloudflare-dns.com/dns-query", "https://dns.google/dns-query"]

[blocking]
# Response for denied domains: "zero" (0.0.0.0) or "nxdomain"
response = "zero"
# Automatically fetch denylist updates every 5 minutes
auto_update = true

[safe_search]
# Enforce safe search on Google, Bing, YouTube, etc.
enabled = true

[web]
# Web interface settings
port = 8080
bind = "127.0.0.1"
# password = "your-password-here"

[logging]
# Query log retention (e.g., "7 days", "1 week", "3 months", "1 year", "forever")
retention = "30 days"
# Log level: debug, info, warn, error
level = "info"
# Output: stderr, syslog, or /path/to/file
output = "stderr"

[dns]
# DNS server settings
port = 53
bind = "0.0.0.0"
cache_size = 10000