ark/profiles/misc/stubby.nix
2020-07-16 15:16:52 -06:00

36 lines
689 B
Nix

{ pkgs, ... }: {
services.stubby = {
enable = true;
upstreamServers = ''
- address_data: 1.1.1.1
tls_port: 853
tls_auth_name: "cloudflare-dns.com"
- address_data: 1.0.0.1
tls_port: 853
tls_auth_name: "cloudflare-dns.com"
'';
};
environment.etc = {
"resolv.conf" = {
text = ''
options edns0
nameserver 127.0.0.1
'';
mode = "444";
};
};
system.activationScripts.immutableDns = {
text = ''
${pkgs.e2fsprogs}/bin/chattr +i /etc/resolv.conf
'';
deps = [ ];
};
networking = {
networkmanager.dns = "none";
resolvconf.dnsExtensionMechanism = false;
};
}