multiple updates

assets/config/config.yaml

@@ -0,0 +1,70 @@
+zoneConfig:
+  timeToLive: 1h
+  baseDomain: example.com
+  emailAddress: domain-admin@example.com
+  zoneRefresh: 1h
+  zoneRetry: 30m
+  zoneExpire: 1w
+  zoneMinimum: 1h
+  nameServers:
+  - ns1.example.com
+  - ns2.example.com
+  blockedDomains: []
+sources:
+  hostFileURLs:
+  - "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
+  - "http://sysctl.org/cameleon/hosts"
+  - "https://raw.githubusercontent.com/DandelionSprout/adfilt/master/Alternate%20versions%20Anti-Malware%20List/AntiMalwareHosts.txt"
+  - "https://raw.githubusercontent.com/FadeMind/hosts.extras/master/add.Risk/hosts"
+  domainListURLs:
+  - "https://raw.githubusercontent.com/dibdot/DoH-IP-blocklists/master/doh-domains.txt"
+  - "https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt"
+  - "https://s3.amazonaws.com/lists.disconnect.me/simple_malvertising.txt"
+  - "https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt"
+  - "https://v.firebog.net/hosts/Prigent-Crypto.txt"
+  - "https://phishing.army/download/phishing_army_blocklist_extended.txt"
+  - "https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt"
+  - "https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt"
+  - "https://dbl.oisd.nl/"
+  - "https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt"
+allowList:
+- ^localhost$
+- ^localhost\.localdomain$
+- ^local$
+- ^broadcasthost$
+- ^ip6-localhost$
+- ^ip6-loopback$
+- ^ip6-localnet$
+- ^ip6-mcastprefix$
+- ^ip6-allnodes$
+- ^ip6-allrouters$
+- ^ip6-allhosts$
+- (^|\.)apiservices\.krxd\.net$
+- (^|\.)app-measurement\.com$
+- (^|\.)assets\.adobedtm\.com$
+- (^|\.)brandify\.com$
+- (^|\.)clients.\.google\.com$
+- (^|\.)doubleclick\.net$
+- (^|\.)duckduckgo\.com$
+- (^|\.)ghostery\.net$
+- (^|\.)googleadservices\.com$
+- (^|\.)kochava\.com$
+- (^|\.)logfiles-va\.zoom\.us$
+- (^|\.)logfiles\.zoom\.us$
+- (^|\.)login\.live\.com$
+- (^|\.)magiskmanager\.com$
+- (^|\.)msn\.com$
+- (^|\.)nest\.com$
+- (^|\.)nexusrules\.officeapps\.live\.com$
+- (^|\.)playfabapi\.com$
+- (^|\.)sailthru\.com$
+- (^|\.)sendgrid\.net$
+- (^|\.)tealiumiq\.com$
+- (^|\.)thepiratebay\.org$
+- (^|\.)unagi-na\.amazon\.com$
+- (^|\.)unagi\.amazon\.com$
+- (^|\.)vercel-dns\.com$
+- ^\w+-\d{4}\.\w+-msedge\.net$ 
+denyList:
+- jindlecleanings.xyz
+- "*.jindlecleanings.xyz"

assets/embed.go

@@ -0,0 +1,9 @@
+package assets
+
+import _ "embed"
+
+//go:embed config/config.yaml
+var Config []byte
+
+//go:embed templates/bind-record.named
+var BindRecord []byte

assets/templates/bind-record.named

@@ -0,0 +1,23 @@
+{{- $domain := .Domain -}}
+$TTL {{ or .TTL "1h" }}
+@	IN	SOA	{{ $domain }}.	{{ or .Email "domain-admin" }}.	(
+			{{ or .Serial "0000000000" }}	; Serial
+			{{ or .Refresh "1h" }}			; Refresh
+			{{ or .Retry "30m" }}			; Retry
+			{{ or .Expire "1w" }}			; Expire
+			{{ or .Minimum "1h" }}			; Minimum
+)
+
+;
+;	Name Servers
+;
+{{- range .NameServers }}
+			IN	NS	{{ . }}.
+{{- end }}
+
+;
+;	Addresses
+;
+{{- range .BlockedDomains }}
+{{ . }}		IN	CNAME	blocked.{{ $domain }}.
+{{- end }}