Encrypted DNS: Difference between revisions

No edit summary
Line 29: Line 29:
=== Example configuration ===
=== Example configuration ===


<syntaxhighlight lang="nix">
<syntaxhighlight lang="nixos">
let
  hasIPv6Internet = true;
in
{
{
   services.dnscrypt-proxy2 = {
   services.dnscrypt-proxy2 = {
Line 35: Line 38:
     settings = {
     settings = {
       # Use servers reachable over IPv6 -- Do not enable if you don't have IPv6 connectivity
       # Use servers reachable over IPv6 -- Do not enable if you don't have IPv6 connectivity
       ipv6_servers = config.networking.enableIPv6;
       ipv6_servers = hasIPv6Internet;
       block_ipv6 = ! (config.networking.enableIPv6);
       block_ipv6 = ! hasIPv6Internet;


       require_dnssec = true;
       require_dnssec = true;