dnscrypt

flake.nix

@@ -29,10 +29,11 @@
         laptop = nixpkgs.lib.nixosSystem {
           inherit system;
           modules = [
-            ./sys/laptop
-            hosts.nixosModule
-            # ./modules/gaming.nix
             ./hardware-configuration.nix
+            ./sys/laptop
+            ./modules/dnscrypt
+            hosts.nixosModule
+            # ./modules/gaming
           ];
         };
       };

modules/dnscrypt/default.nix

@@ -0,0 +1,26 @@
+{
+  networking = {
+    nameservers = [ "127.0.0.1" "::1" ];
+    dhcpcd.extraConfig = "nohook resolv.conf";
+  };
+
+  services.dnscrypt-proxy2 = {
+    enable = true;
+    settings = {
+      ipv6_servers = true;
+      require_dnssec = true;
+      sources.public-resolvers = {
+        urls = [
+          "https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
+          "https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
+        ];
+        cache_file = "/var/lib/dnscrypt-proxy/public-resolvers.md";
+        minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
+      };
+    };
+  };
+  systemd.services.dnscrypt-proxy2.serviceConfig = {
+    StateDirectory = "dnscrypt-proxy";
+  };
+}
+