summary refs log tree commit diff stats
path: root/system
diff options
context:
space:
mode:
Diffstat (limited to 'system')
-rw-r--r--system/linde.nix5
-rwxr-xr-xsystem/nanopi.nix5
2 files changed, 10 insertions, 0 deletions
diff --git a/system/linde.nix b/system/linde.nix
index edccf22f..10425754 100644
--- a/system/linde.nix
+++ b/system/linde.nix
@@ -431,6 +431,11 @@ in
         -- true -- will watch the file for updates
       ))
 
+      policy.add(policy.domains(policy.REFUSE, policy.todnames({
+        'use-application-dns.net',
+        'telemetry.astro.build',
+      })))
+
       -- disable DNSSEC when using Quad9 since they do it
       -- trust_anchors.remove('.')
       -- policy.add(policy.all(policy.TLS_FORWARD({
diff --git a/system/nanopi.nix b/system/nanopi.nix
index 0df57316..2d3551a4 100755
--- a/system/nanopi.nix
+++ b/system/nanopi.nix
@@ -850,6 +850,11 @@ in
         {'2620:fe::fe:11', hostname='dns11.quad9.net'}
       })))
 
+      policy.add(policy.domains(policy.REFUSE, policy.todnames({
+        'use-application-dns.net',
+        'telemetry.astro.build',
+      })))
+
       -- policy.add(policy.rpz(
       -- 	policy.DENY_MSG('domain blocked by hblock'),
       -- 	'/etc/knot-resolver/blocklist.rpz',