felschr/nixos-config
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

feat(networking): enable system-resolved

Browse source 
This seems to be more robust than my previous resolv.conf setup that
I've run into some issues with Mullvad VPN & dnscrypt-proxy with.
This commit is contained in:
Felix Schröter 2023-11-19 00:51:50 +01:00
parent cc49a5c4e7
commit a8c6987854
Signed by: felschr
GPG key ID: 671E39E6744C807D
1 changed files with 7 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
system/networking.nix
View file

@ -1,14 +1,12 @@
{ config, lib, pkgs, ... }: { lib, ... }:
{ {
services.resolved.enable = false; networking.nameservers = [ "127.0.0.1" "::1" ];
networking = { services.resolved = {
nameservers = [ "127.0.0.1" "::1" ]; enable = true;
# If using dhcpcd: # don't use fallback resolvers
dhcpcd.extraConfig = "nohook resolv.conf"; fallbackDns = [ "127.0.0.1" "::1" ];
# If using NetworkManager:
networkmanager.dns = "none";
}; };
services.dnscrypt-proxy2 = { services.dnscrypt-proxy2 = {
@ -19,6 +17,7 @@
ipv6_servers = true; ipv6_servers = true;
require_nolog = true; require_nolog = true;
require_dnssec = true; require_dnssec = true;
http3 = true;
sources.public-resolvers = { sources.public-resolvers = {
urls = [ urls = [