2024-02-23 10:13:54 +01:00
|
|
|
{
|
|
|
|
config,
|
|
|
|
lib,
|
|
|
|
pkgs,
|
|
|
|
...
|
2024-05-07 18:20:52 +02:00
|
|
|
}:
|
|
|
|
{
|
2023-03-01 20:47:27 +01:00
|
|
|
services = {
|
|
|
|
dnsmasq = {
|
|
|
|
enable = true;
|
2023-05-13 07:04:20 +02:00
|
|
|
settings = {
|
2023-03-01 20:47:27 +01:00
|
|
|
# stubby
|
2023-05-13 07:04:20 +02:00
|
|
|
no-resolv = true;
|
|
|
|
proxy-dnssec = true;
|
|
|
|
listen-address = "::1,127.0.0.1";
|
|
|
|
server = [
|
|
|
|
"::1#53000"
|
|
|
|
"127.0.0.1#53000"
|
|
|
|
];
|
2023-03-01 20:47:27 +01:00
|
|
|
# loopback for development
|
2023-05-13 07:04:20 +02:00
|
|
|
address = "/test/127.0.0.1";
|
|
|
|
};
|
2023-03-01 20:47:27 +01:00
|
|
|
};
|
2023-07-25 15:17:00 +02:00
|
|
|
mullvad-vpn = {
|
|
|
|
enable = true;
|
2024-02-23 10:13:54 +01:00
|
|
|
package = lib.mkIf config.isGraphical pkgs.mullvad-vpn;
|
2023-07-25 15:17:00 +02:00
|
|
|
};
|
2023-03-01 20:47:27 +01:00
|
|
|
stubby = {
|
|
|
|
enable = true;
|
2024-05-07 18:20:52 +02:00
|
|
|
settings = pkgs.stubby.passthru.settingsExample // {
|
|
|
|
resolution_type = "GETDNS_RESOLUTION_STUB";
|
|
|
|
listen_addresses = [
|
|
|
|
"127.0.0.1@53000"
|
|
|
|
"0::1@53000"
|
|
|
|
];
|
|
|
|
upstream_recursive_servers = [
|
|
|
|
{
|
|
|
|
address_data = "146.255.56.98";
|
|
|
|
tls_auth_name = "dot1.applied-privacy.net";
|
|
|
|
}
|
|
|
|
{
|
|
|
|
address_data = "2a01:4f8:c0c:83ed::1";
|
|
|
|
tls_auth_name = "dot1.applied-privacy.net";
|
|
|
|
}
|
|
|
|
];
|
|
|
|
};
|
2023-03-01 20:47:27 +01:00
|
|
|
};
|
|
|
|
};
|
2023-02-26 22:49:16 +01:00
|
|
|
}
|