set up unbound dns for server

This commit is contained in:
Henry Hiles 2026-05-27 19:38:45 -04:00
commit 6864cb27cd
Signed by: Henry-Hiles
SSH key fingerprint: SHA256:VKQUdS31Q90KvX7EkKMHMBpUspcmItAh86a+v7PGiIs
3 changed files with 15 additions and 4 deletions

17
modules/graphical/dns.nix Normal file
View file

@ -0,0 +1,17 @@
{
networking.resolvconf.useLocalResolver = true;
services.dnsproxy = {
enable = true;
flags = [
"--cache"
"--cache-size=64000000"
"--cache-optimistic"
];
settings = rec {
upstream = [ "https://base.dns.mullvad.net/dns-query" ];
listen-addrs = [ "127.0.0.1" ];
fallback = [ "1.1.1.1" ];
bootstrap = fallback;
};
};
}