17 lines
484 B
Nix
17 lines
484 B
Nix
{ config, pkgs, ... }:
|
|
with import <stockholm/lib>;
|
|
{
|
|
services.dnscrypt-proxy = {
|
|
enable = true;
|
|
localAddress = "127.1.0.1";
|
|
customResolver = {
|
|
address = config.krebs.hosts.gum.nets.internet.ip4.addr;
|
|
port = 15251;
|
|
name = "2.dnscrypt-cert.euer.krebsco.de";
|
|
key = "1AFC:E58D:F242:0FBB:9EE9:4E51:47F4:5373:D9AE:C2AB:DD96:8448:333D:5D79:272C:A44C";
|
|
};
|
|
};
|
|
services.resolved.enable = true;
|
|
services.resolved.fallbackDns = [ "127.1.0.1" ];
|
|
}
|