dadada/nix-config
dadada/nix-config
1
0
Fork 0
Code Issues 2 Pull requests 5 Projects Releases Packages Wiki Activity Actions 1

wip

Browse source
This commit is contained in:
Tim Schubert 2021-06-02 21:38:52 +02:00
parent 2dcf9e12a7
commit 9b8bb5e88d
Signed by: dadada
GPG key ID: EEB8D1CE62C4DFEA
10 changed files with 41 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

35
modules/networking.nix
View file

@ -23,21 +23,26 @@ in
networking.resolvconf.useLocalResolver = mkIf cfg.useLocalResolver true;
services.unbound = mkIf cfg.useLocalResolver {
enable = true;
allowedAccess = [
"127.0.0.1/8"
"::1"
];
extraConfig = ''
tls-upstream: yes
tls-cert-bundle: "/etc/ssl/certs/ca-bundle.crt"
forward-zone:
name: .
forward-tls-upstream: yes
forward-addr: 2606:4700:4700::1001@853#cloudflare-dns.com
forward-addr: 2606:4700:4700::1111@853#cloudflare-dns.com
forward-addr: 1.1.1.1@853#cloudflare-dns.com
forward-addr: 1.0.0.1@853#cloudflare-dns.com
'';
settings = {
server.interface = [
"127.0.0.1"
"::1"
];
tls-upstream = "yes";
tls-cert-bundle = "/etc/ssl/certs/ca-bundle.crt";
forward-zone = [
{
name = ".";
forward-tls-upstream = "yes";
forward-addr = [
"2606:4700:4700::1001@853#cloudflare-dns.com"
"2606:4700:4700::1111@853#cloudflare-dns.com"
"1.1.1.1@853#cloudflare-dns.com"
"1.0.0.1@853#cloudflare-dns.com"
];
}
];
};
};
networking.useDHCP = false;