DNS over HTTPS

[atridad]

Quick question. How did you folks set this up? I can't seem to enable it using the admin interface. The settings just revert back on reload.

[atridad]

Heh... another question. It seems like I need to port forward port 53 on my network (keep in mind this is a home network) for it to work on devices on my own network. Is there something I'm doing wrong? I'm connecting to my DNS server via its external IP.

[girish]

@atrilahiji That UI is a bit confusing. DNS over HTTPS should work by default, out of the box because it's enabled in the config file. I think that UI is for the case where one can provide their own certs and there is no reverse proxy (unlike cloudron).

[atridad]

@girish Ah I see. So I just had a friend try my DNS server after I forwarded port 53 and added my router IP as the only allowed IP in the admin UI whitelist. Seems like it didn't work for him so I guess me forwarding that port isn't an issue?

[girish]

@atrilahiji You should configure the devices to connect via the LAN IP of your home server (and not by the public/external IP).

What I did was:

• Configured my router to give my Cloudron server a static internal IP.
• Configured router to publish DNS as the Cloudron server's IP above.

You can also test it first like this from another machine:

# host cloudron.io <cloudron-server-internal-ip>

[atridad]

@girish Ahhh I ran into issues doing that but it was because I was restricting to the IP of my router. I did that because it was the only way off-network connections worked at all.

Fixed it. Thanks!

[girish]

@atrilahiji Indeed, you have to whitelist your friend's IP and not router IP.