From fe4930411000926f77996b98b2c1d0d2637696fe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= Date: Thu, 7 Mar 2024 20:05:19 +0100 Subject: [PATCH] feat: switch from dnscrypt-proxy to nextdns --- system/networking.nix | 33 ++++++--------------------------- 1 file changed, 6 insertions(+), 27 deletions(-) diff --git a/system/networking.nix b/system/networking.nix index fa57e84..8e032a6 100644 --- a/system/networking.nix +++ b/system/networking.nix @@ -1,39 +1,18 @@ -{ lib, ... }: +{ config, ... }: { networking.nameservers = [ "127.0.0.1" "::1" ]; + networking.networkmanager.dns = "systemd-resolved"; + services.dnsmasq.enable = false; services.resolved = { enable = true; # don't use fallback resolvers - fallbackDns = [ "127.0.0.1" "::1" ]; + fallbackDns = config.networking.nameservers; }; - services.dnscrypt-proxy2 = { + services.nextdns = { enable = true; - settings = { - listen_addresses = [ "127.0.0.1:53" "[::1]:53" ]; - - ipv6_servers = true; - require_nolog = true; - require_dnssec = true; - http3 = true; - - sources.public-resolvers = { - urls = [ - "https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md" - "https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md" - ]; - cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md"; - minisign_key = - "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3"; - }; - - server_names = [ "mullvad-doh" "controld-unfiltered" ]; - }; - }; - - systemd.services.dnscrypt-proxy2.serviceConfig = { - StateDirectory = lib.mkForce "dnscrypt-proxy2"; + arguments = [ "-config" "b8e2f7" ]; }; }