configured DoH image; it routes DoH requests to docker internal DNS

docker-compose-ruby-2.6.yml

@@ -4,5 +4,24 @@ services:
     image: ruby:2.6-alpine
     environment:
       - HTTPBIN_COALESCING_HOST=another
+      - HTTPX_RESOLVER_URI=https://doh/dns-query
     links:
       - "nghttp2:another"
+    depends_on:
+      - doh
+
+  doh:
+    image: registry.gitlab.com/honeyryderchuck/httpx/nghttp2:2
+    depends_on:
+      - doh-proxy
+    entrypoint:
+      /usr/local/bin/nghttpx
+    volumes:
+      - ./test/support/ci:/home
+    command:
+      --conf /home/doh-nghttp.conf --no-ocsp --frontend 0.0.0.0,443
+
+  doh-proxy:
+    image: publicarray/doh-proxy
+    environment:
+      - "UNBOUND_SERVICE_HOST=127.0.0.11"

docker-compose.yml

@@ -67,7 +67,7 @@ services:
     volumes:
       - ./test/support/ci:/home
     command:
-      --conf /home/nghttp.conf --no-ocsp --frontend 0.0.0.0,80;no-tls --frontend 0.0.0.0,443
+      --conf /home/nghttp.conf --no-ocsp --frontend-frame-debug --frontend 0.0.0.0,80;no-tls --frontend 0.0.0.0,443
 
   altsvc-nghttp2:
     image: registry.gitlab.com/honeyryderchuck/httpx/nghttp2:2

test/support/ci/certs/ca-bundle.crt

@@ -1,3 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
 Certificate:
     Data:
         Version: 3 (0x2)

test/support/ci/certs/ca.srl

@@ -1 +1 @@
-D0B77084C1025AD7
+D0B77084C1025AD8

test/support/ci/certs/doh.crt

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

test/support/ci/certs/doh.csr

@@ -0,0 +1,28 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

test/support/ci/certs/doh.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

test/support/ci/doh-nghttp.conf

@@ -0,0 +1,7 @@
+backend=doh-proxy,3000
+private-key-file=/home/certs/doh.key
+certificate-file=/home/certs/doh.crt
+accesslog-file=/dev/stdout
+errorlog-file=/dev/stderr
+frontend-keep-alive-timeout=10m
+workers=4