1 { config, pkgs, lib, ... }:
4 networkmanager.dns = "none";
5 nameservers = [ "127.0.0.1" "::1" ];
6 #resolvconf.enable = lib.mkForce false;
7 resolvconf.useLocalResolver = true;
8 dhcpcd.extraConfig = "nohook resolv.conf";
10 services.dnscrypt-proxy2 = {
12 # https://github.com/DNSCrypt/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml
13 # FIXME: uncomment when updating to 21.05
14 #upstreamDefaults = true;
17 disabled_server_names = [
20 dnscrypt_servers = true;
22 fallback_resolvers = [
27 ignore_system_dns = true;
31 #proxy = "socks5://127.0.0.1:9050";
33 netprobe_timeout = 60;
39 require_dnssec = true;
40 require_nofilter = true;
42 sources.public-resolvers = {
44 "https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
45 "https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
47 cache_file = "/var/lib/dnscrypt-proxy/public-resolvers.md";
48 minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";