dns-worker 1.1.2 → 1.1.3-canary.09117ba

package/.env.serverfull

@@ -58,14 +58,27 @@ SERVERFULL_ECH_ENABLED=true
 SERVERFULL_ECH_FRONTING_DOMAIN=cloudflare-ech.com
 
 # ------------------------------------------------------------------------------
-# Database Configuration / 本地 SQLite 数据库配置
+# Database Configuration / 数据库配置 (Local SQLite 或远程 Turso / libSQL)
 # ------------------------------------------------------------------------------
+# Database service backend / 数据库后端服务选择 (D1 / Turso / File)
+# Serverless (Cloudflare Workers) mode defaults to D1; Serverfull mode defaults to File.
+# Serverless 模式下默认使用 D1，Serverfull 模式下默认使用 File (本地 SQLite)。
+# Options / 可选值: D1, Turso, File
+DATABASE_SERVICE=File
+
 # Local SQLite database file path / 本地 SQLite 数据库文件存储路径
 # Default: Linux: /var/lib/dns-worker/dns_worker.sqlite, Windows: %ProgramData%\DNS-Worker\dns_worker.sqlite
 # 默认值: Linux 使用 /var/lib/dns-worker/dns_worker.sqlite, Windows 使用 %ProgramData%\DNS-Worker\dns_worker.sqlite
 # Automatically applies all migrations on startup / 启动时自动执行表结构初始化与迁移
 # SERVERFULL_DB_PATH=
 
+# Turso (libSQL) Remote Database / 远程 Turso 分布式数据库配置 (选填)
+# When configured, DNS Worker automatically switches from local SQLite to Turso and runs schema migrations.
+# 当配置了 TURSO_DATABASE_URL 与 TURSO_AUTH_TOKEN 时，系统将自动使用 Turso 远程数据库替代本地 SQLite。
+# Supports both libsql:// and https:// URLs (e.g. libsql://your-db-org.turso.io)
+# TURSO_DATABASE_URL=libsql://your-db-org.turso.io
+# TURSO_AUTH_TOKEN=your_turso_jwt_auth_token_here
+
 # ------------------------------------------------------------------------------
 # Default Profile Routing / 默认解析配置路由
 # ------------------------------------------------------------------------------

package/README.md

@@ -8,11 +8,13 @@
   </p>
 
 [![License: AGPL v3](https://img.shields.io/badge/License-AGPL%20v3-blue.svg)](LICENSE)
+[![npm: dns-worker](https://img.shields.io/npm/v/dns-worker.svg?logo=npm&color=CB3837)](https://www.npmjs.com/dns-worker)
+[![Docker: hugokoo/dns-worker](https://img.shields.io/badge/docker-hugokoo%2Fdns--worker-2496ED.svg?logo=docker)](https://hub.docker.com/r/hugokoo/dns-worker)
 [![Platform: Cloudflare Workers](https://img.shields.io/badge/Platform-Cloudflare%20Workers-orange.svg)](https://workers.cloudflare.com/)
 [![Runtime: Node.js / Bun](https://img.shields.io/badge/Runtime-Node.js%20%7C%20Bun-green.svg)](https://nodejs.org/)
 [![Security: NIST FIPS 203 PQC](https://img.shields.io/badge/Security-NIST%20FIPS%20203%20PQC-purple.svg)](https://csrc.nist.gov/pubs/fips/203/final)
 [![Docs: Astro Starlight](https://img.shields.io/badge/Docs-Astro%20Starlight-blueviolet.svg)](https://obein.github.io/DNS-Worker/)
-[![Protocols: UDP 53 · DoT 853 · DoH](https://img.shields.io/badge/Protocols-UDP%2053%20%7C%20DoT%20853%20%7C%20DoH-brightgreen.svg)](https://obein.github.io/DNS-Worker/deployment/matrix/)
+[![Protocols: UDP 53 · DoT / DoQ · DoH (H2/H3)](https://img.shields.io/badge/Protocols-UDP%2053%20%7C%20DoT%20%2F%20DoQ%20%7C%20DoH%20(H2%2FH3)-brightgreen.svg)](https://obein.github.io/DNS-Worker/deployment/matrix/)
 
 </div>
 
@@ -20,10 +22,11 @@
 
 ## 📖 Introduction
 
-**DNS Worker** is a privacy-first protective DNS resolution system built with an innovative **Dual-Engine Architecture**:
+**DNS Worker** is a privacy-first protective DNS resolution system with built-in ad & malicious domain blocking, powered by an innovative **Dual-Engine Architecture**:
 
-- **☁️ Edge Serverless Mode**: Run on Cloudflare Workers across 300+ edge locations worldwide with D1 database, enjoying zero maintenance.
-- **🖥️ Standalone Server Mode (Serverfull)**: Run completely free of Cloudflare on your own VPS, Linux home server, or Windows machine, with native **UDP 53**, **DoT 853** (TLS SNI routing for Android Private DNS), and local SQLite.
+- **☁️ Edge Serverless Mode**: Run on Cloudflare Workers across 300+ edge locations worldwide with D1 database, enjoying zero maintenance and high-availability DoH (HTTP/2 & HTTP/3 compatible).
+- **🖥️ Standalone Server Mode (Serverfull)**: Run completely free of Cloudflare on your own VPS, Linux home server, or Windows machine, with native **UDP 53**, **DoT 853** (DoQ compatible with TLS SNI routing for Android Private DNS), and local SQLite.
+- **🗄️ Flexible Multi-Database Storage (D1 / Turso / File)**: Native support for multiple storage engines. In addition to Cloudflare D1 (Serverless) and local SQLite files (Serverfull), it natively supports **Turso** (distributed cloud SQLite). Switching `DATABASE_SERVICE` to Turso completely relieves the daily quota constraints of Cloudflare D1's free tier (5M reads / 100k writes daily), effortlessly handling high-throughput DNS query logs.
 
 > 📚 **User Documentation**  
 > 👉 [**https://obein.github.io/DNS-Worker/**](https://obein.github.io/DNS-Worker/)
@@ -42,11 +45,30 @@ dns-worker
 # Web Dashboard: http://localhost:10080
 ```
 
+#### Standalone Server via Docker (Bun LTS)
+```bash
+# Run container with HTTPS (443), DoT (853), classic DNS (53), and TLS certificates
+docker run -d \
+  --name dns-worker \
+  --restart unless-stopped \
+  -p 53:53/udp \
+  -p 853:853/tcp \
+  -p 80:80/tcp \
+  -p 443:443/tcp \
+  -v dns_worker_data:/var/lib/dns-worker \
+  -v dns_worker_config:/etc/dns-worker \
+  -v /etc/letsencrypt:/etc/ssl/dns-worker:ro \
+  hugokoo/dns-worker:latest
+
+# Web Dashboard: https://your-domain-or-ip (HTTP on port 80 auto-redirects to HTTPS 443)
+```
+
 ### Key Highlights
-- ⚡ **Full-Stack Protocols**: UDP 53, DoT 853, DoH (HTTP/2 & HTTP/3), DoQ (RFC 9250), ECH & DDR (RFC 9460).
+- ⚡ **Full-Stack Protocols**: UDP 53, DoT 853 (DoQ RFC 9250 compatible), DoH (HTTP/2 & HTTP/3 compatible), ECH & DDR (RFC 9460).
+- 🗄️ **Multi-Database Engines**: Easily switch between `D1`, `Turso`, and `File` backends via the `DATABASE_SERVICE` environment variable, eliminating D1 free-tier quota limits.
 - 🛡️ **Post-Quantum Zero-Knowledge E2EE**: NIST FIPS 203 **P256-MLKEM768** hybrid lattice cryptography + Hardware Passkeys (WebAuthn).
 - 🚀 **Local-First Architecture**: Embedded in-browser WebAssembly SQLite + OPFS for instant 0ms log analytics and charting.
-- 🛡️ **Granular Protection**: Wildcard filtering, Bloom filter accelerated blocklist subscriptions, custom overrides, and ECH fronting.
+- 🛡️ **Granular Protection & Ad Blocking**: Built-in ad and malicious domain blocking, wildcard filtering, Bloom filter accelerated blocklist subscriptions, custom overrides, and ECH fronting.
 
 ---
 
@@ -72,7 +94,7 @@ dns-worker
 
 DNS Worker stands on the shoulders of modern open-source infrastructure and cryptography:
 
-- **Compute & Runtime**: [Node.js](https://nodejs.org/) (native `node:sqlite`) / [Bun](https://bun.sh/) (>= 1.4.0) & [Cloudflare Workers](https://workers.cloudflare.com/) + [D1 Database](https://developers.cloudflare.com/d1/)
+- **Compute & Runtime**: [Node.js](https://nodejs.org/) (native `node:sqlite`) / [Bun](https://bun.sh/) (>= 1.4.0) & [Cloudflare Workers](https://workers.cloudflare.com/) + [D1 Database](https://developers.cloudflare.com/d1/) / [Turso Database](https://turso.tech/) (libSQL)
 - **User Interface**: [React](https://github.com/facebook/react), [Blueprint](https://github.com/palantir/blueprint) & [Tailwind CSS](https://github.com/tailwindlabs/tailwindcss)
 - **Documentation**: [Astro](https://astro.build/) & [Starlight](https://starlight.astro.build/) (lightning-fast, zero-JS static documentation)
 - **Cryptography & Storage**: [NIST FIPS 203](https://csrc.nist.gov/pubs/fips/203/final) (ML-KEM-768) & [wa-sqlite](https://github.com/rhashimoto/wa-sqlite) (WASM + OPFS Local-First driver)