set up unbound dns for server

This commit is contained in:
Henry Hiles 2026-05-27 19:38:45 -04:00
commit 6864cb27cd
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
3 changed files with 15 additions and 4 deletions

View file

@ -1,20 +0,0 @@
{ lib, ... }:
{
services.dnsproxy = {
enable = true;
flags = [
"--cache"
"--cache-size=64000000"
"--cache-optimistic"
];
settings = rec {
upstream = [ "https://base.dns.mullvad.net/dns-query" ];
listen-addrs = [ "127.0.0.1" ];
fallback = [ "1.1.1.1" ];
bootstrap = fallback;
};
};
environment.etc."resolv.conf".text = lib.mkForce "nameserver 127.0.0.1";
networking.resolvconf.enable = false;
}