noe/nixos
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

aerial/blueberry: extract and enable dns cache

Browse source
This commit is contained in:
41666 2023-12-22 20:36:24 -05:00
parent 2ea0070ca1
commit 8aa5cf6ac6
3 changed files with 15 additions and 10 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
nixos/features/dns-cache.nix Normal file
View file

@ -0,0 +1,12 @@
{...}: {
networking.nameservers = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
services.resolved = {
enable = true;
dnssec = "true";
domains = [ "~." ];
fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
extraConfig = ''
DNSOverTLS=yes
'';
};
}

12
nixos/hosts/aerial/default.nix
View file

@ -8,6 +8,7 @@
../../features/sound ../../features/sound
../../features/nvidia.nix ../../features/nvidia.nix
../../features/steam.nix ../../features/steam.nix
../../features/dns-cache.nix
]; ];
home-manager.users.noe = import ../../../home-manager/noe/hosts/aerial.nix; home-manager.users.noe = import ../../../home-manager/noe/hosts/aerial.nix;
@ -28,15 +29,6 @@
networking.firewall.allowedTCPPorts = [ 42069 ]; networking.firewall.allowedTCPPorts = [ 42069 ];
networking.firewall.allowedUDPPorts = [ 42069 ]; networking.firewall.allowedUDPPorts = [ 42069 ];
networking.nameservers = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
services.resolved = {
enable = true;
dnssec = "true";
domains = [ "~." ];
fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
extraConfig = ''
DNSOverTLS=yes
'';
};
} }

1
nixos/hosts/blueberry/default.nix
View file

@ -7,6 +7,7 @@
../../features/podman.nix ../../features/podman.nix
../../features/nginx.nix ../../features/nginx.nix
../../features/dns-cache.nix
../../stacks/ps2.live ../../stacks/ps2.live
]; ];