h/dotfiles
1
Fork 0
Code Actions Activity

refactor: dnscrypt-proxy config into module

Browse Source
This commit is contained in:
Himadri Bhattacharjee
2024-10-02 09:12:43 +05:30
parent ed0158d067
commit f0d2dfac6b
2 changed files with 30 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
hosts/default/configuration.nix
View File

@@ -8,6 +8,7 @@
./filesystem-hardening.nix
./phone-as-webcam.nix
./nvidia.nix
./secure-dns.nix
];
boot = {
@@ -34,33 +35,6 @@
};
services.fwupd.enable = true;
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
require_dnssec = true;
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
# You can choose a specific set of servers from
# https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md
server_names = [
"dnsforge.de"
"mullvad-adblock-doh"
];
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = "dnscrypt-proxy";
};
# Set your time zone.
time.timeZone = "Asia/Kolkata";

29
hosts/default/secure-dns.nix Normal file
View File

@@ -0,0 +1,29 @@
{
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
require_dnssec = true;
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
# You can choose a specific set of servers from
# https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md
server_names = [
"dnsforge.de"
"mullvad-adblock-doh"
];
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = "dnscrypt-proxy";
};
}