pyrox.dev
dnscrypt-proxy module: formatting
+13
-4
nixos/modules/services/networking/dnscrypt-proxy.nix
+13
-4
nixos/modules/services/networking/dnscrypt-proxy.nix
···
62
of other machines (typically on the local network).
63
'';
64
};
65
localPort = mkOption {
66
default = 53;
67
type = types.int;
···
72
to a different value; otherwise leave the default.
73
'';
74
};
75
resolverName = mkOption {
76
default = "dnscrypt.eu-nl";
77
type = types.nullOr types.str;
···
82
extensions, and claims to not keep logs.
83
'';
84
};
85
resolverList = mkOption {
86
description = ''
87
The list of upstream DNSCrypt resolvers. By default, we use the most
···
94
};
95
defaultText = "pkgs.fetchurl { url = ...; sha256 = ...; }";
96
};
97
customResolver = mkOption {
98
default = null;
99
description = ''
···
103
type = types.nullOr (types.submodule ({ ... }: { options = {
104
address = mkOption {
105
type = types.str;
106
-
description = "Resolver IP address";
107
example = "208.67.220.220";
108
};
109
port = mkOption {
110
type = types.int;
111
-
description = "Resolver port";
112
default = 443;
113
};
114
name = mkOption {
115
type = types.str;
116
-
description = "Provider fully qualified domain name";
117
example = "2.dnscrypt-cert.opendns.com";
118
};
119
key = mkOption {
120
type = types.str;
121
-
description = "Provider public key";
122
example = "B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79";
123
};
124
}; }));
125
};
126
tcpOnly = mkOption {
127
default = false;
128
type = types.bool;
···
131
TCP instead of UDP (on port 443). Use only if the UDP port is blocked.
132
'';
133
};
134
ephemeralKeys = mkOption {
135
default = false;
136
type = types.bool;
···
62
of other machines (typically on the local network).
63
'';
64
};
65
+
66
localPort = mkOption {
67
default = 53;
68
type = types.int;
···
73
to a different value; otherwise leave the default.
74
'';
75
};
76
+
77
resolverName = mkOption {
78
default = "dnscrypt.eu-nl";
79
type = types.nullOr types.str;
···
84
extensions, and claims to not keep logs.
85
'';
86
};
87
+
88
resolverList = mkOption {
89
description = ''
90
The list of upstream DNSCrypt resolvers. By default, we use the most
···
97
};
98
defaultText = "pkgs.fetchurl { url = ...; sha256 = ...; }";
99
};
100
+
101
customResolver = mkOption {
102
default = null;
103
description = ''
···
107
type = types.nullOr (types.submodule ({ ... }: { options = {
108
address = mkOption {
109
type = types.str;
110
+
description = "IP address";
111
example = "208.67.220.220";
112
};
113
+
114
port = mkOption {
115
type = types.int;
116
+
description = "Port";
117
default = 443;
118
};
119
+
120
name = mkOption {
121
type = types.str;
122
+
description = "Fully qualified domain name";
123
example = "2.dnscrypt-cert.opendns.com";
124
};
125
+
126
key = mkOption {
127
type = types.str;
128
+
description = "Public key";
129
example = "B735:1140:206F:225D:3E2B:D822:D7FD:691E:A1C3:3CC8:D666:8D0C:BE04:BFAB:CA43:FB79";
130
};
131
}; }));
132
};
133
+
134
tcpOnly = mkOption {
135
default = false;
136
type = types.bool;
···
139
TCP instead of UDP (on port 443). Use only if the UDP port is blocked.
140
'';
141
};
142
+
143
ephemeralKeys = mkOption {
144
default = false;
145
type = types.bool;