From baf7f439803f149a73b2ef5c3748810e600bdb8b Mon Sep 17 00:00:00 2001
From: Benoit <forgejo@benoit.jp.net>
Date: Sat, 15 Feb 2025 13:41:38 +0900
Subject: [PATCH] Adguard: Re-enable DoT + 443

---
 04listen.cfg   | 8 ++++++++
 05backends.cfg | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/04listen.cfg b/04listen.cfg
index 474bede..39a7dfa 100644
--- a/04listen.cfg
+++ b/04listen.cfg
@@ -32,3 +32,11 @@ listen ssh
       mode tcp
       option tcplog
     server mailcow mailcow.incus:14190 send-proxy
+
+# Adguard
+listen adguard-dot
+    bind :853
+    bind :::853 v6only
+      mode tcp
+      option tcplog
+    server adguard adguard.incus:10853 send-proxy
diff --git a/05backends.cfg b/05backends.cfg
index 9d9773a..86f7a35 100644
--- a/05backends.cfg
+++ b/05backends.cfg
@@ -65,7 +65,7 @@ backend adguard
   http-response set-header X-Content-Type-Options "nosniff"
   http-response set-header Referrer-Policy "strict-origin-when-cross-origin"
   http-response set-header Cross-Origin-Resource-Policy "same-origin"
-  server adguard adguard.incus:80 check
+  server adguard adguard.incus:443 check
 
 backend vaultwarden
   # set HSTS for one year after all responses