From f34e78cab5f4a10a8e8e2a5c8ef99a1e643c23cf Mon Sep 17 00:00:00 2001
From: lassulus <lassulus@lassul.us>
Date: Mon, 9 Oct 2017 13:23:11 +0200
Subject: l dns-stuff: add gum as resolver

---
 lass/2configs/dns-stuff.nix | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

(limited to 'lass/2configs/dns-stuff.nix')

diff --git a/lass/2configs/dns-stuff.nix b/lass/2configs/dns-stuff.nix
index 0c96e6e91..e305145f5 100644
--- a/lass/2configs/dns-stuff.nix
+++ b/lass/2configs/dns-stuff.nix
@@ -4,7 +4,12 @@ with import <stockholm/lib>;
   services.dnscrypt-proxy = {
     enable = true;
     localAddress = "127.1.0.1";
-    resolverName = "cs-de";
+    customResolver = {
+      address = config.krebs.hosts.gum.nets.internet.ip4.addr;
+      port = 15251;
+      name = "2.dnscrypt-cert.euer.krebsco.de";
+      key = "1AFC:E58D:F242:0FBB:9EE9:4E51:47F4:5373:D9AE:C2AB:DD96:8448:333D:5D79:272C:A44C";
+    };
   };
   services.dnsmasq = {
     enable = true;
@@ -17,8 +22,6 @@ with import <stockholm/lib>;
       all-servers
       dnssec
       trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5
-      address=/blog/127.0.0.1
-      address=/blog/::1
       rebind-domain-ok=/onion/
       server=/.onion/127.0.0.1#9053
       port=53
-- 
cgit v1.2.3