From b9c61b918217d85f4de687e4fc4a6bf26c3a2bac Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= <dev@felschr.com>
Date: Sun, 14 Aug 2022 13:53:21 +0200
Subject: [PATCH] feat(system): improve dnscrypt-proxy config

---
 system/networking.nix | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/system/networking.nix b/system/networking.nix
index 01eecdd..5b0632c 100644
--- a/system/networking.nix
+++ b/system/networking.nix
@@ -17,19 +17,20 @@
       listen_addresses = [ "127.0.0.1:53" "[::1]:53" ];
 
       ipv6_servers = true;
+      require_nolog = true;
       require_dnssec = true;
 
-      sources.public-resolvers = {
-        urls = [
-          "https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
-          "https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
-        ];
-        cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
-        minisign_key =
-          "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
+      static = {
+        mullvad-adblock-doh.stamp =
+          "sdns://AgMAAAAAAAAAACD5_zfwLmMstzhwJcB-V5CKPTcbfJXYzdA5DeIx7ZQ6EhdhZGJsb2NrLmRvaC5tdWxsdmFkLm5ldAovZG5zLXF1ZXJ5";
+        blahdns-de-doh.stamp =
+          "sdns://AgMAAAAAAAAADTc4LjQ2LjI0NC4xNDMAEmRvaC1kZS5ibGFoZG5zLmNvbQovZG5zLXF1ZXJ5";
+        blahdns-de-doh-v6.stamp =
+          "sdns://AgMAAAAAAAAAFlsyYTAxOjRmODpjMTc6ZWM2Nzo6MV0AEmRvaC1kZS5ibGFoZG5zLmNvbQovZG5zLXF1ZXJ5";
       };
 
-      server_names = [ "mullvad-adblock-doh" ];
+      server_names =
+        [ "mullvad-adblock-doh" "blahdns-de-doh" "blahdns-de-doh-v6" ];
     };
   };