Waarom deze configuratie?
- Echte data-soevereiniteit: 100% AVG/GDPR compliant. Lokale gegevens en configuratie blijven op eigen hardware zonder cloud-afhankelijkheid.
- Hardware agnostisch: Geoptimaliseerd voor Raspberry Pi 5 (ARM64) en Proxmox VE hypervisors (x86_64 LXC & VM).
- Engine vrijheid: Getest en gevalideerd voor Docker CE en rootless Podman zonder root-privileges.
- Platform verificatie: Tested on Proxmox LXC: docker (24.04, 2026-09-14), podman (24.04, 2026-09-14); Proxmox VM: docker (24.04, 2026-09-14), podman (24.04, 2026-09-14).
Snelle Start (Standalone Docker Compose)
Onderstaand compose-fragment is direct te gebruiken in elke Docker- of Podman-omgeving:
services:
technitium-dns:
container_name: njorddeploy-technitium-dns
hostname: dns-server
image: "technitium/dns-server:latest"
ports:
- "5380:5380/tcp"
- "53:53/udp"
- "53:53/tcp"
- "853:853/tcp"
- "443:443/tcp"
- "853:853/udp"
environment:
- "DNS_SERVER_DOMAIN=dns-server.local"
- "DNS_SERVER_ADMIN_PASSWORD=AdminPassword123!"
- "DNS_SERVER_WEB_SERVICE_HTTP_PORT=5380"
- "DNS_SERVER_LOG_FOLDER_PATH=/var/log/technitium/dns"
- "DNS_SERVER_ENABLE_BLOCKING=true"
- "DNS_SERVER_BLOCK_LIST_URLS=https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
- "DNS_SERVER_FORWARDERS=1.1.1.1, 8.8.8.8"
- "DNS_SERVER_FORWARDER_PROTOCOL=Https"
- "DNS_SERVER_RECURSION=AllowOnlyForPrivateNetworks"
- "DNS_SERVER_RECURSION_NETWORK_ACL=172.16.0.0/12, 192.168.0.0/16, 172.16.0.1/8"
- "DNS_SERVER_LOG_USING_LOCAL_TIME=true"
- "DNS_SERVER_LOG_MAX_LOG_FILE_DAYS=30"
- "DNS_SERVER_PREFER_IPV6=false"
volumes:
- "./data/technitium-dns/config:/etc/dns"
- "./data/technitium-dns/logs:/var/log/technitium/dns"
user: "0:0"
restart: unless-stopped
networks:
- njorddeploy_net
networks:
njorddeploy_net:
Start de service direct via de commandline: docker compose up -d
Configuratie & Omgevingsvariabelen
Belangrijkste configuratieparameters en standaardwaarden uit de NjordDeploy component-sjabloon:
| Variable | Default Value | Description |
|---|---|---|
DNS_WEB_CONSOLE_PORT |
5380 |
The host port for accessing the Technitium DNS Server web console via HTTP. |
DNS_UDP_PORT |
53 |
The host port for the standard DNS service over UDP. Typically port 53. |
DNS_TCP_PORT |
53 |
The host port for the standard DNS service over TCP. Typically port 53. |
DNS_DOT_PORT |
853 |
The host port for the DNS-over-TLS (DoT) service. Typically port 853. |
DNS_DOH_PORT |
443 |
The host port for the DNS-over-HTTPS (DoH) service. Typically port 443. |
DNS_DOQ_PORT |
853 |
The host port for the DNS-over-QUIC (DoQ) service. Typically port 853. |
DNS_SERVER_DOMAIN |
dns-server.local |
The primary fully qualified domain name used by this DNS Server to identify itself. |
DNS_ADMIN_PASSWORD |
AdminPassword123! |
The password for the DNS web console admin user. This is set on first run. |
DNS_ENABLE_BLOCKING |
true |
Set to 'true' to enable blocking of domain names using Blocked Zone and Block List Zone features. |
DNS_BLOCK_LIST_URLS |
https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts |
A comma-separated list of URLs for block lists (e.g., hosts files) to be used for ad and malware blocking. |
DNS_FORWARDERS |
1.1.1.1, 8.8.8.8 |
A comma-separated list of IP addresses for upstream DNS forwarders (e.g., Cloudflare, Google DNS). |
DNS_FORWARDER_PROTOCOL |
Https |
The protocol to use for upstream DNS forwarders. Options: Udp, Tcp, Tls, Https, HttpsJson. |
DNS_RECURSION_MODE |
AllowOnlyForPrivateNetworks |
Defines who can use the DNS server for recursive queries. Options: Allow, Deny, AllowOnlyForPrivateNetworks, UseSpecifiedNetworkACL. |
DNS_RECURSION_ACL |
172.16.0.0/12, 192.168.0.0/16, 172.16.0.1/8 |
Comma-separated list of IP addresses or network addresses (CIDR) to allow/deny recursion. Only valid for 'UseSpecifiedNetworkACL' recursion mode. Prefix with '!' to deny. |
DNS_LOG_MAX_DAYS |
30 |
Maximum number of days to keep log files. Log files older than this will be deleted automatically. Set to 0 to disable auto-delete. |
DNS_PREFER_IPV6 |
false |
Set to 'true' to make the DNS Server prefer IPv6 for querying whenever possible. |
Ecosysteem & Bedrijfsintegratie
- Reverse Proxy Klaar: Direct te koppelen met Caddy, Traefik of Nginx Proxy Manager inclusief automatische Let's Encrypt TLS.
- Veilige Remote Toegang: Naadloos te combineren met WireGuard of Tailscale/Headscale voor veilige toegang buiten het lokale netwerk.
- Transactieve Back-ups: Geschikt voor point-in-time database dumps en container-safe volume snapshotting via NjordDeploy.
Eenvoudig beheren via NjordDeploy
Installeer, bewaak en update deze service met 1 klik op uw eigen Raspberry Pi of Proxmox server via de NjordDeploy Configurator.