From 263574ce356aef5e7a6b1be1572f4e069509bd16 Mon Sep 17 00:00:00 2001
From: Henry-Hiles <henry@henryhiles.com>
Date: Wed, 12 Feb 2025 18:46:12 +0100
Subject: [PATCH] Encrypted dns

---
 modules/common-desktop/dns.nix | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 modules/common-desktop/dns.nix

diff --git a/modules/common-desktop/dns.nix b/modules/common-desktop/dns.nix
new file mode 100644
index 0000000..e053f1e
--- /dev/null
+++ b/modules/common-desktop/dns.nix
@@ -0,0 +1,11 @@
+{
+  services.dnsproxy = {
+    enable = true;
+    settings = {
+      upstream = ["https://base.dns.mullvad.net/dns-query"];
+      bootstrap = ["1.1.1.1"];
+    };
+  };
+
+  environment.etc."resolv.conf".text = "nameserver 0.0.0.0";
+}