25 lines
718 B
Nix
25 lines
718 B
Nix
{...}: {
|
|
services.blocky = {
|
|
enable = false;
|
|
settings = {
|
|
ports.dns = 53; # Port for incoming DNS Queries.
|
|
upstreams.groups.default = [
|
|
"https://one.one.one.one/dns-query" # Using Cloudflare's DNS over HTTPS server for resolving queries.
|
|
];
|
|
# For initially solving DoH/DoT Requests when no system Resolver is available.
|
|
bootstrapDns = {
|
|
upstream = "https://one.one.one.one/dns-query";
|
|
ips = ["1.1.1.1" "1.0.0.1"];
|
|
};
|
|
blocking = {
|
|
denylists = {
|
|
ads = ["https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"];
|
|
};
|
|
clientGroupsBlock = {
|
|
default = ["ads"];
|
|
};
|
|
};
|
|
};
|
|
};
|
|
}
|