Lillian-Violet/NixOS-Config
1
0
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

undo the tls dns stuff it's clearly not working

Browse source
This commit is contained in:
Lillian Violet 2024-12-16 21:34:44 +01:00
parent 122a869e56
commit 704c91ff20
1 changed files with 55 additions and 51 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

106
nixos/hosts/wheatley/configuration.nix
View file

@ -62,59 +62,63 @@
# Configure DNS servers manually (this example uses Cloudflare and Google DNS)
# IPv6 DNS servers can be used here as well.
networking.nameservers = [
"127.0.0.1"
"::1"
# "127.0.0.1"
# "::1"
"94.140.14.49"
"94.140.14.59"
"2a10:50c0:0:0:0:0:ded:ff"
"2a10:50c0:0:0:0:0:ded:ff"
];
services.stubby = {
enable = true;
settings =
pkgs.stubby.passthru.settingsExample
// {
upstream_recursive_servers = [
{
address_data = "94.140.14.49";
tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [
{
digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
}
];
}
{
address_data = "94.140.14.59";
tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [
{
digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
}
];
}
{
address_data = "2a10:50c0:0:0:0:0:ded:ff";
tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [
{
digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
}
];
}
{
address_data = "2a10:50c0:0:0:0:0:dad:ff";
tls_auth_name = "4b921896.d.adguard-dns.com";
tls_pubkey_pinset = [
{
digest = "sha256";
value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
}
];
}
];
};
};
# services.stubby = {
# enable = true;
# settings =
# pkgs.stubby.passthru.settingsExample
# // {
# upstream_recursive_servers = [
# {
# address_data = "94.140.14.49";
# tls_auth_name = "4b921896.d.adguard-dns.com";
# tls_pubkey_pinset = [
# {
# digest = "sha256";
# value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
# }
# ];
# }
# {
# address_data = "94.140.14.59";
# tls_auth_name = "4b921896.d.adguard-dns.com";
# tls_pubkey_pinset = [
# {
# digest = "sha256";
# value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
# }
# ];
# }
# {
# address_data = "2a10:50c0:0:0:0:0:ded:ff";
# tls_auth_name = "4b921896.d.adguard-dns.com";
# tls_pubkey_pinset = [
# {
# digest = "sha256";
# value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
# }
# ];
# }
# {
# address_data = "2a10:50c0:0:0:0:0:dad:ff";
# tls_auth_name = "4b921896.d.adguard-dns.com";
# tls_pubkey_pinset = [
# {
# digest = "sha256";
# value = "19HOzAWb2bgl7bo/b4Soag+5luf7bo6vlDN8W812k4U=";
# }
# ];
# }
# ];
# };
# };
services.openssh = {
enable = true;