···17{
18 options = {
19 services.dnscrypt-proxy = {
20- enable = mkOption {
21- default = false;
22- type = types.bool;
23- description = ''
24- Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
25- DNSCrypt enabled upstream resolver. The traffic between the
26- client and the upstream resolver is encrypted and authenticated,
27- which may mitigate the risk of MITM attacks and third-party
28- snooping (assuming the upstream is trustworthy).
29- '';
30- };
31 localAddress = mkOption {
32 default = "127.0.0.1";
33 type = types.string;
···17{
18 options = {
19 services.dnscrypt-proxy = {
20+ enable = mkEnableOption ''
21+ Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
22+ DNSCrypt enabled upstream resolver. The traffic between the
23+ client and the upstream resolver is encrypted and authenticated,
24+ which may mitigate the risk of MITM attacks and third-party
25+ snooping (assuming the upstream is trustworthy).
26+ '';
000027 localAddress = mkOption {
28 default = "127.0.0.1";
29 type = types.string;