Add dnscrypt-proxy
This commit is contained in:
parent
3a416a1eca
commit
00daa59cd5
2 changed files with 27 additions and 1 deletions
26
profiles/dnscrypt/default.nix
Normal file
26
profiles/dnscrypt/default.nix
Normal file
|
@ -0,0 +1,26 @@
|
||||||
|
{
|
||||||
|
networking = {
|
||||||
|
nameservers = [ "127.0.0.1" "::1" ];
|
||||||
|
resolvconf.useLocalResolver = true;
|
||||||
|
# If using dhcpcd:
|
||||||
|
dhcpcd.extraConfig = "nohook resolv.conf";
|
||||||
|
# If using NetworkManager:
|
||||||
|
networkmanager.dns = "none";
|
||||||
|
};
|
||||||
|
services.dnscrypt-proxy2 = {
|
||||||
|
enable = true;
|
||||||
|
settings = {
|
||||||
|
ipv6_servers = false;
|
||||||
|
require_dnssec = true;
|
||||||
|
|
||||||
|
sources.public-resolvers = {
|
||||||
|
urls = [
|
||||||
|
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
|
||||||
|
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
|
||||||
|
];
|
||||||
|
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
|
||||||
|
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
|
||||||
|
};
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
|
@ -1,6 +1,6 @@
|
||||||
{ profiles, ... }:
|
{ profiles, ... }:
|
||||||
with profiles; rec {
|
with profiles; rec {
|
||||||
base = [ users.root core ];
|
base = [ users.root core dnscrypt ];
|
||||||
workstation = base ++ [ sway develop game profiles.workstation ssh flatpak torrents pwn tor rust ];
|
workstation = base ++ [ sway develop game profiles.workstation ssh flatpak torrents pwn tor rust ];
|
||||||
desktop = workstation ++ [ users.mae-desk amd school three_dee androidev ];
|
desktop = workstation ++ [ users.mae-desk amd school three_dee androidev ];
|
||||||
lap = workstation ++ [ users.mae-lap laptop bluetooth print networkmanager androidev ];
|
lap = workstation ++ [ users.mae-lap laptop bluetooth print networkmanager androidev ];
|
||||||
|
|
Loading…
Reference in a new issue