summaryrefslogtreecommitdiffstats
path: root/lass/2configs/dns-stuff.nix
diff options
context:
space:
mode:
authorlassulus <lassulus@lassul.us>2017-10-09 13:23:11 +0200
committerlassulus <lassulus@lassul.us>2017-10-09 13:23:11 +0200
commitf34e78cab5f4a10a8e8e2a5c8ef99a1e643c23cf (patch)
treeaf3a7e93beff905ac6b1bb7d1b3269e9ae181c84 /lass/2configs/dns-stuff.nix
parentacb02ae901ec6d94ff0133d7c92286bc285b62d3 (diff)
l dns-stuff: add gum as resolver
Diffstat (limited to 'lass/2configs/dns-stuff.nix')
-rw-r--r--lass/2configs/dns-stuff.nix9
1 files changed, 6 insertions, 3 deletions
diff --git a/lass/2configs/dns-stuff.nix b/lass/2configs/dns-stuff.nix
index 0c96e6e91..e305145f5 100644
--- a/lass/2configs/dns-stuff.nix
+++ b/lass/2configs/dns-stuff.nix
@@ -4,7 +4,12 @@ with import <stockholm/lib>;
services.dnscrypt-proxy = {
enable = true;
localAddress = "127.1.0.1";
- resolverName = "cs-de";
+ customResolver = {
+ address = config.krebs.hosts.gum.nets.internet.ip4.addr;
+ port = 15251;
+ name = "2.dnscrypt-cert.euer.krebsco.de";
+ key = "1AFC:E58D:F242:0FBB:9EE9:4E51:47F4:5373:D9AE:C2AB:DD96:8448:333D:5D79:272C:A44C";
+ };
};
services.dnsmasq = {
enable = true;
@@ -17,8 +22,6 @@ with import <stockholm/lib>;
all-servers
dnssec
trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
- address=/blog/127.0.0.1
- address=/blog/::1
rebind-domain-ok=/onion/
server=/.onion/127.0.0.1#9053
port=53