jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

dnscrypt-proxy2

Browse Source
This commit is contained in:
Danilo Reyes 2024-10-05 15:56:56 -06:00
parent 46f6fc626f
commit dd71c99d0a
1 changed files with 36 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
modules/services/network.nix
View File

@ -5,12 +5,47 @@
networking = {
enableIPv6 = true;
firewall.enable = true;
networkmanager.enable = true;
dhcpcd.extraConfig = "nohook resolv.conf";
networkmanager = {
enable = true;
dns = "none";
};
hosts = {
"192.168.1.64" = [ "workstation" ];
"192.168.1.69" = [ "server" ];
"192.168.1.100" = [ "miniserver" ];
};
};
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
require_dnssec = true;
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
server_names = [
"cloudflare"
"cloudflare-ipv6"
"cloudflare-security"
"cloudflare-security-ipv6"
"adguard-dns-doh"
"mullvad-adblock-doh"
"mullvad-doh"
"nextdns"
"nextdns-ipv6"
"quad9-dnscrypt-ipv4-filter-pri"
"ibksturm"
];
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = "dnscrypt-proxy";
};
};
}