all repos — nixfiles @ 0b446897e178560307fceecb1ac6a1ab08ebf8ee

System and user configuration, managed by nix and home-manager

Split network-manager and kresd

Alan Pearce
commit

0b446897e178560307fceecb1ac6a1ab08ebf8ee

parent

ce2c59088a85f960fde8f0446580ea5f3b8ace8f

1 file changed, 22 insertions(+), 0 deletions(-)

changed files
A system/settings/services/kresd.nix
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, ... }:
+
+let
+  nextdnsConfig = "abd6e5";
+  hostname = config.networking.hostName;
+in
+{
+  services.kresd = {
+    enable = true;
+    extraConfig = ''
+      cache.size = 100*MB
+      cache.min_ttl(3 * 3600)
+
+      policy.add(policy.all(policy.TLS_FORWARD({
+        {'45.90.28.0', hostname='${hostname}-${nextdnsConfig}.dns1.nextdns.io'},
+        {'2a07:a8c0::', hostname='${hostname}-${nextdnsConfig}.dns1.nextdns.io'},
+        {'45.90.30.0', hostname='${hostname}-${nextdnsConfig}.dns2.nextdns.io'},
+        {'2a07:a8c1::', hostname='${hostname}-${nextdnsConfig}.dns2.nextdns.io'}
+      })))
+    '';
+  };
+}