hackens-org-configurations/machines/hackens-milieu/dns/default.nix
2024-09-24 13:42:57 +02:00

45 lines
1 KiB
Nix

{ pkgs, lib, ... }:
let
# Activez moi si vous comprenez pas ce qui se passe
# et consultez le journalctl de dnscrypt-proxy2.
debugDNS = false;
in
{
networking = {
nameservers = [
"127.0.0.1"
"::1"
];
};
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
require_dnssec = true;
forwarding_rules = ./forwarding.txt;
query_log =
if debugDNS then
{
file = "/dev/stdout";
}
else
{ };
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = lib.mkForce "dnscrypt-proxy2";
};
}