chore: update docs (#33)

README.md

@@ -35,13 +35,13 @@ You can also
 - use the [Nix flake](https://github.com/Cottand/leng/tree/master/flake.nix)
     - `nix run github:cottand/leng`
 
-Detailed guides and resources can be found on the [wiki](https://github.com/cottand/leng/wiki).
+Detailed guides and resources can be found in the [docs website](https://cottand.github.com/leng).
 
 # Configuration
 
 By default, leng binds DNS to `0.0.0.0:53` and loads a few known blocklists. The default settings should be enough for
 most.
-See [the wiki](https://github.com/Cottand/leng/wiki/Configuration) for the full config, including defaults and dynamic
+See [the wiki](https://cottand.github.io/leng/Configuration) for the full config, including defaults and dynamic
 config reloading.
 
 ### CLI Flags
@@ -82,11 +82,6 @@ with `0.0.0.0` to ensure that the API interface is available.
 curl -H "Accept: application/json" http://127.0.0.1:55006/application/active
 ```
 
-# Daemonize
-
-You can find examples of different daemon scripts for leng on
-the [wiki](https://github.com/cottand/leng/wiki/Daemon-Scripts).
-
 # Objectives
 
 - [x] ~~ARM64 Docker builds~~

doc/src/Docker.md

@@ -0,0 +1,37 @@
+# Docker
+
+Leng is also distributed as a Docker image.
+[You can find published images here](https://github.com/Cottand/leng/pkgs/container/leng).
+The image is small (v1.3.1 is under 13MB).
+
+Supported architectures are linux AMD64, ARM64, ARMv6, ARMv7.
+
+> If you think leng ought to support more OSs or architectures, please
+[make an issue](https://github.com/Cottand/leng/issues/new).
+
+## Running
+
+With the default configuration:
+
+```bash
+docker run -d \
+  -p 53:53/udp \
+  -p 53:53/tcp \
+  -p 8080:8080/tcp \
+  ghcr.io/cottand/leng
+```
+
+With a specific `leng.toml`:
+
+```bash
+docker run -d \
+  -p 53:53/udp \
+  -p 53:53/tcp \
+  -p 8080:8080/tcp \
+  -v leng.toml:/leng.toml \
+  ghcr.io/cottand/leng \
+  -config /leng.toml
+
+```
+
+See [Configuratin](./Configuration.md) for the full config.

doc/src/SUMMARY.md

@@ -16,6 +16,7 @@
 
 # Deployment
 
+- [Docker](Docker.md)
 - [As systemd service on Debian-based distro](./Deploying-on-Debian.md)
 - [Securing with a Firewall on Linux](./Securing-on-linux.md)
 - [Nix](./Nix.md)

doc/src/Securing-on-linux.md

@@ -20,4 +20,9 @@ ufw allow from <ip or range> to any port 53
 ufw reload
 ```
 
-Now only the client(s) you whitelisted can access the dns server.
+Now only the client(s) you whitelisted can access the dns server.
+
+> ⚠ For Docker deployments, keep in mind `ufw` will **not** stop
+> outside connections to your containers if you bind their ports.
+> See the [Docker docs](https://docs.docker.com/network/packet-filtering-firewalls/#docker-and-ufw)
+> about the issue.