pyrox.dev
lol
nixos/dnscrypt-proxy: use new dyne.org repository
+3
-3
nixos/modules/services/networking/dnscrypt-proxy.nix
+3
-3
nixos/modules/services/networking/dnscrypt-proxy.nix
···
10
# This is somewhat more flexible than preloading the key as an
11
# embedded string.
12
upstreamResolverListPubKey = pkgs.fetchurl {
13
-
url = https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/master/minisign.pub;
14
sha256 = "18lnp8qr6ghfc2sd46nn1rhcpr324fqlvgsp4zaigw396cd7vnnh";
15
};
16
···
258
domain=raw.githubusercontent.com
259
get="curl -fSs --resolve $domain:443:$(hostip -r 8.8.8.8 $domain | head -1)"
260
$get -o dnscrypt-resolvers.csv.tmp \
261
-
https://$domain/jedisct1/dnscrypt-proxy/master/dnscrypt-resolvers.csv
262
$get -o dnscrypt-resolvers.csv.minisig.tmp \
263
-
https://$domain/jedisct1/dnscrypt-proxy/master/dnscrypt-resolvers.csv.minisig
264
mv dnscrypt-resolvers.csv.minisig{.tmp,}
265
if ! minisign -q -V -p ${upstreamResolverListPubKey} \
266
-m dnscrypt-resolvers.csv.tmp -x dnscrypt-resolvers.csv.minisig ; then
···
10
# This is somewhat more flexible than preloading the key as an
11
# embedded string.
12
upstreamResolverListPubKey = pkgs.fetchurl {
13
+
url = https://raw.githubusercontent.com/dyne/dnscrypt-proxy/master/minisign.pub;
14
sha256 = "18lnp8qr6ghfc2sd46nn1rhcpr324fqlvgsp4zaigw396cd7vnnh";
15
};
16
···
258
domain=raw.githubusercontent.com
259
get="curl -fSs --resolve $domain:443:$(hostip -r 8.8.8.8 $domain | head -1)"
260
$get -o dnscrypt-resolvers.csv.tmp \
261
+
https://$domain/dyne/dnscrypt-proxy/master/dnscrypt-resolvers.csv
262
$get -o dnscrypt-resolvers.csv.minisig.tmp \
263
+
https://$domain/dyne/dnscrypt-proxy/master/dnscrypt-resolvers.csv.minisig
264
mv dnscrypt-resolvers.csv.minisig{.tmp,}
265
if ! minisign -q -V -p ${upstreamResolverListPubKey} \
266
-m dnscrypt-resolvers.csv.tmp -x dnscrypt-resolvers.csv.minisig ; then