summary refs log tree commit diff stats
path: root/system/settings/services
diff options
context:
space:
mode:
Diffstat (limited to 'system/settings/services')
-rw-r--r--system/settings/services/kresd.nix22
1 files changed, 22 insertions, 0 deletions
diff --git a/system/settings/services/kresd.nix b/system/settings/services/kresd.nix
new file mode 100644
index 00000000..335d96cc
--- /dev/null
+++ b/system/settings/services/kresd.nix
@@ -0,0 +1,22 @@
+{ config, lib, pkgs, ... }:
+
+let
+  nextdnsConfig = "abd6e5";
+  hostname = config.networking.hostName;
+in
+{
+  services.kresd = {
+    enable = true;
+    extraConfig = ''
+      cache.size = 100*MB
+      cache.min_ttl(3 * 3600)
+
+      policy.add(policy.all(policy.TLS_FORWARD({
+        {'45.90.28.0', hostname='${hostname}-${nextdnsConfig}.dns1.nextdns.io'},
+        {'2a07:a8c0::', hostname='${hostname}-${nextdnsConfig}.dns1.nextdns.io'},
+        {'45.90.30.0', hostname='${hostname}-${nextdnsConfig}.dns2.nextdns.io'},
+        {'2a07:a8c1::', hostname='${hostname}-${nextdnsConfig}.dns2.nextdns.io'}
+      })))
+    '';
+  };
+}