mirror of
https://github.com/NixOS/nixpkgs.git
synced 2024-10-22 11:54:30 -04:00
52f0553209
The dnscrypt-proxy service relays regular DNS queries to
a DNSCrypt enabled upstream resolver.
The traffic between the client and the upstream resolver is
encrypted and authenticated, which may mitigate the risk of
MITM attacks and third-party snooping (assuming a trustworthy
upstream).
Though dnscrypt-proxy can run as a standalone DNS client,
the recommended setup is to use it as a forwarder for a
caching DNS client.
To use dnscrypt-proxy as a forwarder for dnsmasq, do
```nix
{
# ...
networking.nameservers = [ "127.0.0.1" ];
networking.dhcpcd.extraConfig = "nohook resolv.conf";
services.dnscrypt-proxy.enable = true;
services.dnscrypt-proxy.localAddress = "127.0.0.1";
services.dnscrypt-proxy.port = 40;
services.dnsmasq.enable = true;
services.dnsmasq.extraConfig = ''
no-resolv
server=127.0.0.1#40
listen-address=127.0.0.1
'';
# ...
}
```
|
||
|---|---|---|
| .. | ||
| ircd-hybrid | ||
| ssh | ||
| amuled.nix | ||
| atftpd.nix | ||
| avahi-daemon.nix | ||
| bind.nix | ||
| bitlbee.nix | ||
| btsync.nix | ||
| chrony.nix | ||
| cjdns-hosts.sh | ||
| cjdns.nix | ||
| cntlm.nix | ||
| connman.nix | ||
| consul.nix | ||
| copy-com.nix | ||
| ddclient.nix | ||
| dhcpcd.nix | ||
| dhcpd.nix | ||
| dnscrypt-proxy.nix | ||
| dnsmasq.nix | ||
| ejabberd.nix | ||
| firewall.nix | ||
| flashpolicyd.nix | ||
| freenet.nix | ||
| git-daemon.nix | ||
| gnunet.nix | ||
| gogoclient.nix | ||
| gvpe.nix | ||
| haproxy.nix | ||
| hostapd.nix | ||
| i2pd.nix | ||
| ifplugd.nix | ||
| iodined.nix | ||
| kippo.nix | ||
| mailpile.nix | ||
| minidlna.nix | ||
| murmur.nix | ||
| nat.nix | ||
| networkmanager.nix | ||
| ngircd.nix | ||
| notbit.nix | ||
| nsd.nix | ||
| ntopng.nix | ||
| ntpd.nix | ||
| oidentd.nix | ||
| openfire.nix | ||
| openntpd.nix | ||
| openvpn.nix | ||
| polipo.nix | ||
| prayer.nix | ||
| privoxy.nix | ||
| prosody.nix | ||
| quassel.nix | ||
| radicale.nix | ||
| radvd.nix | ||
| rdnssd.nix | ||
| rpcbind.nix | ||
| sabnzbd.nix | ||
| searx.nix | ||
| seeks.nix | ||
| spiped.nix | ||
| supybot.nix | ||
| syncthing.nix | ||
| tcpcrypt.nix | ||
| teamspeak3.nix | ||
| tftpd.nix | ||
| unbound.nix | ||
| unifi.nix | ||
| vsftpd.nix | ||
| wakeonlan.nix | ||
| websockify.nix | ||
| wicd.nix | ||
| wpa_supplicant.nix | ||
| xinetd.nix | ||
| znc.nix | ||