Lillian-Violet/NixOS-Config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

undo the tls dns stuff it's clearly not working

Browse source
This commit is contained in:
Lillian Violet 2024-12-16 21:34:44 +01:00
parent 122a869e56
commit 704c91ff20
1 changed files with 55 additions and 51 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

106
nixos/hosts/wheatley/configuration.nix
View file

@ -62,59 +62,63 @@
# Configure DNS servers manually (this example uses Cloudflare and Google DNS) # Configure DNS servers manually (this example uses Cloudflare and Google DNS)
# IPv6 DNS servers can be used here as well. # IPv6 DNS servers can be used here as well.
networking.nameservers = [ networking.nameservers = [
"127.0.0.1" # "127.0.0.1"
"::1" # "::1"
"94.140.14.49"
"94.140.14.59"
"2a10:50c0:0:0:0:0:ded:ff"
"2a10:50c0:0:0:0:0:ded:ff"
]; ];
services.stubby = { # services.stubby = {
enable = true; # enable = true;
settings = # settings =
pkgs.stubby.passthru.settingsExample # pkgs.stubby.passthru.settingsExample
// { # // {
upstream_recursive_servers = [ # upstream_recursive_servers = [
{ # {
address_data = "94.140.14.49"; # address_data = "94.140.14.49";
tls_auth_name = "4b921896.d.adguard-dns.com"; # tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [ # tls_pubkey_pinset = [
{ # {
digest = "sha256"; # digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U="; # value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
} # }
]; # ];
} # }
{ # {
address_data = "94.140.14.59"; # address_data = "94.140.14.59";
tls_auth_name = "4b921896.d.adguard-dns.com"; # tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [ # tls_pubkey_pinset = [
{ # {
digest = "sha256"; # digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U="; # value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
} # }
]; # ];
} # }
{ # {
address_data = "2a10:50c0:0:0:0:0:ded:ff"; # address_data = "2a10:50c0:0:0:0:0:ded:ff";
tls_auth_name = "4b921896.d.adguard-dns.com"; # tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [ # tls_pubkey_pinset = [
{ # {
digest = "sha256"; # digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U="; # value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
} # }
]; # ];
} # }
{ # {
address_data = "2a10:50c0:0:0:0:0:dad:ff"; # address_data = "2a10:50c0:0:0:0:0:dad:ff";
tls_auth_name = "4b921896.d.adguard-dns.com"; # tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [ # tls_pubkey_pinset = [
{ # {
digest = "sha256"; # digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U="; # value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
} # }
]; # ];
} # }
]; # ];
}; # };
}; # };
services.openssh = { services.openssh = {
enable = true; enable = true;