DNSCRYPT-WRAPPER(8)

📦 version 0.4.2, in arch rolling

🎀 DNSCRYPT-WRAPPER(8) — Admin Manual, bestie 🎀

💖 NAME 💖

dnscrypt-wrapper — Creates an empty website template almost ready for deployment. That’s literally the NAME line, bestie; we are keeping it exactly as the manpage gives it. No cap. 😭💅

🛰️ SYNOPSIS 🛰️

Here’s the whole invocation in all its bracket-y glory, copied exactly:

dnscrypt-wrapper [-h] [-a <str>] [-r <str>] [-U] [-u <str>] [-l <str>]
[-p <str>] [-d] [-V] [-v] [--gen-cert-file] [--gen-crypt-keypair]
[--gen-provider-keypair] [--show-provider-publickey-fingerprint]
[--provider-cert-file=<str>] [--provider-name=<str>] [--provider-
publickey-file=<str>] [--provider-secretkey-file=<str>] [--crypt-
secretkey-file=<str>] [--cert-file-expire-days=<int>]

🦋 DESCRIPTION 🦋

Okay so dnscrypt-wrapper is in the DNSCrypt house. DNSCrypt is a protocol that authenticates communications between a DNS client and a DNS resolver. It prevents DNS spoofing. It uses cryptographic signatures to verify that responses originate from the chosen DNS resolver and haven't been tampered with. 🦋🔒

✨ OPTIONS ✨

Every single option, in order, with the defaults and paths kept exactly:

  • -h, --help — displays the dnscrypt-wrapper help message and exits. Slay. ✨
  • -a <str>, --listen-address=<str> — sets the local address to listen on. Default: 0.0.0.0:53. 🫶
  • <str>-r, --resolver-address=<str> — sets the upstream dns resolver server (<address:port>). Yes, the page has that stray <str> before -r; preserving it, no cap. 💀
  • -U, --unauthenticated — allows and forwards unauthenticated queries. Default: off. 🙈
  • -u <str>, --user=<str> — runs the service as the given user. 👑
  • -l <str>, --logfile=<str> — logs file path. Default: stdout. 🍓
  • -p <str>, --pidfile=<str> — pid file path. Default: none. 🎀
  • -d, --daemonize — runs as daemon. Default: off. 💅
  • -V, --verbose — sets the service to be more verbose. Specify more -VVV to increase verbosity. 🔥
  • -v, --version — shows version info and exits. ⭐
  • --gen-cert-file — generates pre-signed certificate. 🧚
  • --gen-crypt-keypair — generates crypt key pair. 🔑
  • --gen-provider-keypair — generates provider key pair. 🗝️
  • --show-provider-publickey-fingerprint — displays provider public key fingerprint. 👀
  • --provider-cert-file=<str> — certificate file. Default: ./dnscrypt.cert. 💖
  • --provider-name=<str> — provider name. 🏷️
  • --provider-publickey-file=<str> — provider public key file. Default: ./public.key. 🌸
  • --provider-secretkey-file=<str> — provider secret key file. Default: ./secret.key. 🤫
  • --crypt-secretkey-file=<str> — crypt secret key file. Default: ./crypt_secret.key. 🔐
  • --cert-file-expire-days=<int> — cert file expire days. Default: 365. 📅

💜 SEE ALSO 💜

dnscrypt-proxy(8) — go read that one too, bestie. 💜

xoxo, Debian GNU/Linux 💖 — dated December 26th, 2016 — DNSCRYPT-WRAPPER(8), signing off. 🎀✨

📦 where this page comes from