feat: Added stuff

nixos/ryu/services/resolved.nix

@@ -2,8 +2,8 @@
   services.resolved = {
     enable = true;
     dnssec = "true";
-    domains = ["~." "lemur-newton.ts.net"];
-    fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
     dnsovertls = "true";
+    domains = ["lemur-newton.ts.net"];
+    fallbackDns = ["192.168.0.125"];
   };
 }

nixos/tsuba/services/blocky.nix

@@ -0,0 +1,24 @@
+{...}: {
+  services.blocky = {
+    enable = true;
+    settings = {
+      ports.dns = 53; # Port for incoming DNS Queries.
+      upstreams.groups.default = [
+        "https://one.one.one.one/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries.
+      ];
+      # For initially solving DoH/DoT Requests when no system Resolver is available.
+      bootstrapDns = {
+        upstream = "https://one.one.one.one/dns-query";
+        ips = ["1.1.1.1" "1.0.0.1"];
+      };
+      blocking = {
+        denylists = {
+          ads = ["https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"];
+        };
+        clientGroupsBlock = {
+          default = ["ads"];
+        };
+      };
+    };
+  };
+}

nixos/tsuba/services/default.nix

@@ -8,7 +8,8 @@
     ./deluge.nix
     ./homeassistant.nix
     # ./dnscrypt.nix
-    ./resolved.nix
+    # ./resolved.nix
+    ./blocky.nix
     ./flaresolverr.nix
   ];
 }