diff options
| author | lassulus <lassulus@lassul.us> | 2017-10-09 13:23:11 +0200 |
|---|---|---|
| committer | lassulus <lassulus@lassul.us> | 2017-10-09 13:23:11 +0200 |
| commit | f34e78cab5f4a10a8e8e2a5c8ef99a1e643c23cf (patch) | |
| tree | af3a7e93beff905ac6b1bb7d1b3269e9ae181c84 /lass | |
| parent | acb02ae901ec6d94ff0133d7c92286bc285b62d3 (diff) | |
l dns-stuff: add gum as resolver
Diffstat (limited to 'lass')
| -rw-r--r-- | lass/2configs/dns-stuff.nix | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/lass/2configs/dns-stuff.nix b/lass/2configs/dns-stuff.nix index 0c96e6e9..e305145f 100644 --- a/lass/2configs/dns-stuff.nix +++ b/lass/2configs/dns-stuff.nix @@ -4,7 +4,12 @@ with import <stockholm/lib>; services.dnscrypt-proxy = { enable = true; localAddress = "127.1.0.1"; - resolverName = "cs-de"; + customResolver = { + address = config.krebs.hosts.gum.nets.internet.ip4.addr; + port = 15251; + name = "2.dnscrypt-cert.euer.krebsco.de"; + key = "1AFC:E58D:F242:0FBB:9EE9:4E51:47F4:5373:D9AE:C2AB:DD96:8448:333D:5D79:272C:A44C"; + }; }; services.dnsmasq = { enable = true; @@ -17,8 +22,6 @@ with import <stockholm/lib>; all-servers dnssec trust-anchor=.,19036,8,2,49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 - address=/blog/127.0.0.1 - address=/blog/::1 rebind-domain-ok=/onion/ server=/.onion/127.0.0.1#9053 port=53 |