felschr/nixos-config
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

feat: enable DNS over HTTPS

Browse source
This commit is contained in:
Felix Schröter 2021-05-11 20:58:03 +02:00
parent 165e395929
commit 0b85b13267
No known key found for this signature in database
GPG key ID: 910ACB9F6BD26F58
2 changed files with 40 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
home/browsers/firefox.nix
View file

@ -30,6 +30,9 @@ let
"browser.sessionstore.privacy_level" = 2;
"network.IDN_show_punycode" = true;
# Disable DNS over HTTPS (done system-wide)
"network.trr.mode" = 5;
# Theme
"ui.systemUsesDarkTheme" = prefer-dark-theme;
"extensions.activeThemeID" = concatStrings [

37
system/networking.nix Normal file
View file

@ -0,0 +1,37 @@
{ config, lib, pkgs, ... }:
{
services.resolved.enable = false;
networking = {
nameservers = [ "127.0.0.1" "::1" ];
resolvconf.enable = lib.mkForce false;
# If using dhcpcd:
dhcpcd.extraConfig = "nohook resolv.conf";
# If using NetworkManager:
networkmanager.dns = "none";
};
services.dnscrypt-proxy2 = {
enable = true;
settings = {
ipv6_servers = true;
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
minisign_key =
"RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
server_names = [ "mullvad-doh" ];
};
};
systemd.services.dnscrypt-proxy2.serviceConfig = {
StateDirectory = lib.mkForce "dnscrypt-proxy2";
};
}