From 57abccc95c89385f6683c8def484e39f3aa514bc Mon Sep 17 00:00:00 2001 From: Timothy DeHerrera Date: Mon, 16 Dec 2019 02:34:29 -0700 Subject: [PATCH] misc#stubby: init --- profiles/misc/default.nix | 6 ++++++ profiles/misc/stubby.nix | 30 ++++++++++++++++++++++++++++++ 2 files changed, 36 insertions(+) create mode 100644 profiles/misc/default.nix create mode 100644 profiles/misc/stubby.nix diff --git a/profiles/misc/default.nix b/profiles/misc/default.nix new file mode 100644 index 0000000..53b9a0d --- /dev/null +++ b/profiles/misc/default.nix @@ -0,0 +1,6 @@ +{ ... }: +{ + imports = [ + ./stubby.nix + ]; +} diff --git a/profiles/misc/stubby.nix b/profiles/misc/stubby.nix new file mode 100644 index 0000000..2f7c421 --- /dev/null +++ b/profiles/misc/stubby.nix @@ -0,0 +1,30 @@ +{ ... }: +{ + services.stubby = { + enable = true; + upstreamServers = '' + - address_data: 1.1.1.1 + tls_port: 853 + tls_auth_name: "cloudflare-dns.com" + - address_data: 1.0.0.1 + tls_port: 853 + tls_auth_name: "cloudflare-dns.com" + ''; + }; + + environment.etc = { + "resolv.conf" = { + text = '' + options edns0 + nameserver 127.0.0.1 + ''; + mode = "444"; + }; + }; + + + networking = { + networkmanager.dns = "none"; + resolvconf.dnsExtensionMechanism = false; + }; +}