hackens-org-configurations/profiles/shared-hackens/dns/default.nix

39 lines
1,005 B
Nix
Raw Normal View History

2021-11-02 19:30:28 +01:00
{ pkgs, lib, ... }:
2021-11-02 21:04:11 +01:00
let
# Activez moi si vous comprenez pas ce qui se passe
# et consultez le journalctl de dnscrypt-proxy2.
debugDNS = false;
in
2021-11-02 19:30:28 +01:00
{
networking = {
nameservers = [ "127.0.0.1" "::1" ];
};
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
require_dnssec = true;
2023-01-15 18:34:00 +01:00
forwarding_rules = ./forwarding.txt;
2021-11-02 19:30:28 +01:00
2021-11-02 21:04:11 +01:00
query_log = if debugDNS then {
file = "/dev/stdout";
} else {};
2021-11-02 19:30:28 +01:00
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = lib.mkForce "dnscrypt-proxy2";
};
}