From 98039c2ea0642c7bb719952cc45665d0c5de2fd0 Mon Sep 17 00:00:00 2001
From: unexplrd <unexplrd@linerds.us>
Date: Tue, 25 Mar 2025 14:36:30 +0200
Subject: [PATCH] hosts/sarien/configuration.nix: add dnscrypt-proxy

Signed-off-by: unexplrd <unexplrd@linerds.us>
---
 hosts/sarien/configuration.nix | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/hosts/sarien/configuration.nix b/hosts/sarien/configuration.nix
index 3e3a245..8896e45 100644
--- a/hosts/sarien/configuration.nix
+++ b/hosts/sarien/configuration.nix
@@ -75,6 +75,14 @@
     fstrim.enable = true;
     openssh.enable = true;
     syncthing.openDefaultPorts = true;
+    dnscrypt-proxy2 = {
+      enable = true;
+      settings = {
+        require_dnssec = true;
+        server_names = ["mullvad-doh"];
+        bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
+      };
+    };
   };
   services.scx = {
     enable = true;