.\" DO NOT MODIFY THIS FILE!  It was generated by help2man 1.46.5.
.TH DNSCRYPT-WRAPPER "8" "December 2016" "dnscrypt-wrapper 0.2.1" "System Administration Utilities"
.SH NAME
dnscrypt-wrapper \- A server-side DNSCrypt proxy that adds DNSCrypt support to any name resolver.
.SH SYNOPSIS
.B dnscrypt-wrapper
[\fI\,options\/\fR]
.SH DESCRIPTION
.TP
\fB\-h\fR, \fB\-\-help\fR
show this help message and exit
.TP
\fB\-\-gen\-cert\-file\fR
generate pre\-signed certificate
.TP
\fB\-\-gen\-crypt\-keypair\fR
generate crypt key pair
.TP
\fB\-\-gen\-provider\-keypair\fR
generate provider key pair
.TP
\fB\-\-show\-provider\-publickey\-fingerprint\fR
display provider public key fingerprint
.TP
\fB\-\-provider\-cert\-file=\fR<str>
certificate file (default: ./dnscrypt.cert)
.TP
\fB\-\-provider\-name=\fR<str>
provider name
.TP
\fB\-\-provider\-publickey\-file=\fR<str>
provider public key file (default: ./public.key)
.TP
\fB\-\-provider\-secretkey\-file=\fR<str>
provider secret key file (default: ./secret.key)
.TP
\fB\-\-crypt\-secretkey\-file=\fR<str>
crypt secret key file (default: ./crypt_secret.key)
.TP
\fB\-\-cert\-file\-expire\-days=\fR<int>
cert file expire days (default: 365)
.TP
\fB\-a\fR, \fB\-\-listen\-address=\fR<str>
local address to listen (default: 0.0.0.0:53)
.TP
\fB\-r\fR, \fB\-\-resolver\-address=\fR<str>
upstream dns resolver server (<address:port>)
.TP
\fB\-U\fR, \fB\-\-unauthenticated\fR
allow and forward unauthenticated queries (default: off)
.TP
\fB\-u\fR, \fB\-\-user=\fR<str>
run as given user
.TP
\fB\-l\fR, \fB\-\-logfile=\fR<str>
log file path (default: stdout)
.TP
\fB\-p\fR, \fB\-\-pidfile=\fR<str>
pid stored file
.TP
\fB\-d\fR, \fB\-\-daemonize\fR
run as daemon (default: off)
.TP
\fB\-V\fR, \fB\-\-verbose\fR
show verbose logs (specify more \fB\-VVV\fR to increase verbosity)
.TP
\fB\-v\fR, \fB\-\-version\fR
show version info