about summary refs log tree commit diff
path: root/guix
diff options
context:
space:
mode:
authorNguyễn Gia Phong <cnx@loang.net>2023-12-14 09:25:02 +0900
committerNguyễn Gia Phong <cnx@loang.net>2023-12-14 09:25:02 +0900
commit81897b76214d191340e2451278b0f2568757b9bf (patch)
tree52a1c29c97ddeee70cc7fbb7f4397c013adab5b2 /guix
parentaabe53d9fa064c7d85f8baa6b048383bc762f4de (diff)
downloaddotfiles-81897b76214d191340e2451278b0f2568757b9bf.tar.gz
Use OpenNIC DNS over TLS
Diffstat (limited to 'guix')
-rw-r--r--guix/system.scm22
1 files changed, 16 insertions, 6 deletions
diff --git a/guix/system.scm b/guix/system.scm
index 5c4428e..724466c 100644
--- a/guix/system.scm
+++ b/guix/system.scm
@@ -1,6 +1,3 @@
-;; This is an operating system configuration generated
-;; by the graphical installer.
-
 (use-modules (gnu)
              (gnu system setuid))
 (use-service-modules avahi desktop dict dns networking nix sound ssh xorg)
@@ -47,6 +44,21 @@
            (service nftables-service-type
                     (nftables-configuration
                       (ruleset (local-file "./nftables.conf"))))
+           (service
+             smartdns-service-type
+             (smartdns-configuration
+               (servers-tls
+                 (map (lambda (address)
+                        (smartdns-server-configuration (ip address)))
+                      '("137.220.55.93" ;ns1.ca.dns.opennic.glue
+                        "51.254.162.59" ;ns9.de.dns.opennic.glue
+                        "217.160.70.42" ;ns13.de.dns.opennic.glue
+                        "178.254.22.166" ;ns16.de.dns.opennic.glue
+                        "81.169.136.222" ;ns18.de.dns.opennic.glue
+                        "94.16.114.254" ;ns28.de.dns.opennic.glue
+                        "194.36.144.87" ;ns29.de.dns.opennic.glue
+                        "185.181.61.24" ;ns1.no.dns.opennic.glue
+                        "168.235.111.72")))));ns2.ny.us.dns.opennic.glue
            (service static-networking-service-type
                     (list (static-networking
                             (addresses
@@ -57,9 +69,7 @@
                               (list (network-route
                                       (destination "default")
                                       (gateway "192.168.0.1"))))
-                            (name-servers
-                              '("147.182.243.49" ; ns4.ca.us
-                                "103.1.206.179"))))) ; ns2.au
+                            (name-servers '("localhost")))))
            (service avahi-service-type)
            (service udisks-service-type)
            (service elogind-service-type)