hosts/sarien/configuration.nix: add dnscrypt-proxy

Signed-off-by: unexplrd <unexplrd@linerds.us>
2025-03-25 14:36:30 +02:00
parent bb0a0ccb1c
commit 98039c2ea0
1 changed files with 8 additions and 0 deletions
--- a/hosts/sarien/configuration.nix
+++ b/hosts/sarien/configuration.nix
@ -75,6 +75,14 @@
    fstrim.enable = true;
    openssh.enable = true;
    syncthing.openDefaultPorts = true;
+    dnscrypt-proxy2 = {
+      enable = true;
+      settings = {
+        require_dnssec = true;
+        server_names = ["mullvad-doh"];
+        bootstrap_resolvers = ["9.9.9.11:53" "9.9.9.9:53"];
+      };
+    };
  };
  services.scx = {
    enable = true;