all repos — nixfiles @ 0b446897e178560307fceecb1ac6a1ab08ebf8ee

System and user configuration, managed by nix and home-manager

Split network-manager and kresd

Alan Pearce
commit

0b446897e178560307fceecb1ac6a1ab08ebf8ee

parent

ce2c59088a85f960fde8f0446580ea5f3b8ace8f

1 file changed, 22 insertions(+), 0 deletions(-)

changed files
A system/settings/services/kresd.nix
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, ... }: + +let + nextdnsConfig = "abd6e5"; + hostname = config.networking.hostName; +in +{ + services.kresd = { + enable = true; + extraConfig = '' + cache.size = 100*MB + cache.min_ttl(3 * 3600) + + policy.add(policy.all(policy.TLS_FORWARD({ + {'45.90.28.0', hostname='${hostname}-${nextdnsConfig}.dns1.nextdns.io'}, + {'2a07:a8c0::', hostname='${hostname}-${nextdnsConfig}.dns1.nextdns.io'}, + {'45.90.30.0', hostname='${hostname}-${nextdnsConfig}.dns2.nextdns.io'}, + {'2a07:a8c1::', hostname='${hostname}-${nextdnsConfig}.dns2.nextdns.io'} + }))) + ''; + }; +}