Improve examples

Author: jedisct1

dnscrypt-proxy/example-allowed-names.txt

@@ -13,7 +13,7 @@
 ## =example.com             | allows example.com but not *.example.com
 ## [a-z0-9\-_]*.example.com | allows *.example.com but not example.com
 ## *sex*                    | matches any name containing that substring
-## ads[0-9]*                | matches "ads" followed by one or more digits
+## ads[0-9]*                | matches "ads" followed by a digit and anything else
 ## ads*.example*            | *, ? and [] can be used anywhere, but prefixes/suffixes are faster
 
 

dnscrypt-proxy/example-blocked-names.txt

@@ -13,7 +13,7 @@
 ## =example.com             | blocks example.com but not *.example.com
 ## [a-z0-9\-_]*.example.com | blocks *.example.com but not example.com
 ## *sex*                    | matches any name containing that substring
-## ads[0-9]*                | matches "ads" followed by one or more digits
+## ads[0-9]*                | matches "ads" followed by a digit and anything else
 ## ads*.example*            | *, ? and [] can be used anywhere, but prefixes/suffixes are faster
 
 ad.*

dnscrypt-proxy/example-dnscrypt-proxy.toml

@@ -690,8 +690,6 @@ format = 'tsv'
 ## Allowed IP lists support the same patterns as IP blocklists
 ## If an IP response matches an allowed entry, the corresponding session
 ## will bypass IP filters.
-##
-## Time-based rules are also supported to make some websites only accessible at specific times of the day.
 
 [allowed_ips]
 
@@ -763,7 +761,7 @@ format = 'tsv'
 ## expiring after `cache_ttl` hours.
 ##
 ## `refresh_delay` controls how often to download updates during normal operation.
-## Must be in the [24..168] interval (1 day to 1 week).
+## Must be in the [25..169] interval; values outside that range are clamped.
 ##
 ## `cache_ttl` controls how old the cache can be at startup before requiring
 ## an immediate download. Defaults to 168 hours if not set.
@@ -937,7 +935,7 @@ skip_incompatible = false
 ## retrieved via a relay, try getting them directly. Actual queries
 ## will then always go through relays.
 
-# direct_cert_fallback = false
+# direct_cert_fallback = true
 
 
 ###############################################################################
@@ -1035,8 +1033,8 @@ enable_query_log = true
 
 ## Privacy level for the monitoring UI
 ## 0: show all details including client IPs
-## 1: anonymize client IPs (default)
-## 2: aggregate data only (no individual queries or domains shown)
+## 1: anonymize client IPs
+## 2: aggregate data only (no individual queries or domains shown) (default)
 privacy_level = 1
 
 ## Maximum number of recent query log entries to keep in memory

dnscrypt-proxy/example-forwarding-rules.txt

@@ -6,6 +6,11 @@
 ## The general format is:
 ## <domain> <server address>[:port] [, <server address>[:port]...]
 ## IPv6 addresses can be specified by enclosing the address in square brackets.
+##
+## When multiple plain server addresses are listed, one of them is picked at
+## random for every query. Keywords such as $DHCP or $BOOTSTRAP, on the other
+## hand, act as fallbacks: they are only tried, in order, after the entries
+## listed before them have failed.
 
 ## The following keywords can also be used instead of a server address:
 ## $BOOTSTRAP to use the default bootstrap resolvers