diff --git a/nameserver.nix b/nameserver.nix index 234be58..52f9e6c 100644 --- a/nameserver.nix +++ b/nameserver.nix @@ -17,10 +17,7 @@ settings.local-address = [ "0.0.0.0" "::" ]; }; - # Wrap the local recursive resolver - # in DNSCrypt on the default OpenVPN port. - # This port is chosen because it's usually - # not blocked in corporate networks. + # Wrap the local recursive resolver in DNSCrypt services.dnscrypt-wrapper = { enable = true; address = "[::]"; @@ -39,10 +36,10 @@ ]; settings.protocols = [ # Send TLS to nginx (TCP) - { name = "tls"; host= "localhost"; port= "443"; } + { name = "tls"; host = "localhost"; port= "443"; } # Send DNSCrypt to dnscrypt-wrapper (TCP or UDP) { name = "anyprot"; host = "localhost"; port = "5353"; } - { name = "anyprot"; host = "localhost"; port = "5353"; is_udp = true;} + { name = "anyprot"; host = "localhost"; port = "5353"; is_udp = true; } ]; };