1 files changed, 19 insertions, 2 deletions
diff --git a/network/dnscrypt-wrapper/dnscrypt-wrapper.default b/network/dnscrypt-wrapper/dnscrypt-wrapper.default
index 2d3a85bad3..cb3f6eded5 100644
--- a/network/dnscrypt-wrapper/dnscrypt-wrapper.default
+++ b/network/dnscrypt-wrapper/dnscrypt-wrapper.default
@@ -14,9 +14,13 @@ CHROOTDIR[0]="/run/dnscrypt"
 # The address and (optional) port to listen on. The default port is 53.
 LISTENADDRESS[0]="0.0.0.0:53"
 
+# The external IP address and (optional) port to listen on. This is used to
+# create the stamp to give to clients. The default port is 53.
+EXTADDRESS[0]="127.0.0.1:53"
+
 # The pid file for this instance. PIDFILE must always be specified for each
 # instance!
-PIDFILE[0]="/var/run/dnscrypt-wrapper/dnscrypt-wrapper-0.pid"
+PIDFILE[0]="/run/dnscrypt-wrapper/dnscrypt-wrapper-0.pid"
 
 # Runs the daemon as the following user and chroots to that user's home
 # directory (this is a security feature -- it is best not to change this!)
@@ -61,10 +65,23 @@ RESOLVERADDRESS[0]="8.8.8.8:53"
 # Where to log.
 LOGFILE[0]="/var/log/dnscrypt-wrapper/dnscrypt-wrapper.log"
 
+# Whether or not the server stores logs (self-reported to clients). Default is
+# no, i.e. logs are kept.
+#NOLOG[0]="no"
+
+# Whether or not the server supports DNSSEC. Default is no, i.e. DNSSEC is not
+# supported.
+#DNSSEC[0]="no"
+
+# The number of days the certificate is valid (i.e. expiration date). By
+# default, if unset, this is 1 day (24 hours).
+#CERTEXPIRATION[0]="1"
+
 # A simple example configuration for a second instance
 #CHROOTDIR[1]="/run/dnscrypt"
 #LISTENADDRESS[1]="0.0.0.0:5353"
-#PIDFILE[1]="/var/run/dnscrypt-wrapper/dnscrypt-wrapper-1.pid"
+#EXTADDRESS[1]="127.0.0.2:5353"
+#PIDFILE[1]="/run/dnscrypt-wrapper/dnscrypt-wrapper-1.pid"
 #USER[1]="dnscrypt"
 #DNSCRYPTDIR[1]="/var/lib/dnscrypt-wrapper/1"
 #PROVIDERNAME[1]="2.dnscrypt-cert.hostname.localdomain"