nixpkgs/nixos/modules/services/networking
Joachim Fasting 52f0553209 Add dnscrypt-proxy service
The dnscrypt-proxy service relays regular DNS queries to
a DNSCrypt enabled upstream resolver.
The traffic between the client and the upstream resolver is
encrypted and authenticated, which may mitigate the risk of
MITM attacks and third-party snooping (assuming a trustworthy
upstream).

Though dnscrypt-proxy can run as a standalone DNS client,
the recommended setup is to use it as a forwarder for a
caching DNS client.
To use dnscrypt-proxy as a forwarder for dnsmasq, do

```nix
{
  # ...

  networking.nameservers = [ "127.0.0.1" ];
  networking.dhcpcd.extraConfig = "nohook resolv.conf";

  services.dnscrypt-proxy.enable = true;
  services.dnscrypt-proxy.localAddress = "127.0.0.1";
  services.dnscrypt-proxy.port = 40;

  services.dnsmasq.enable = true;
  services.dnsmasq.extraConfig = ''
    no-resolv
    server=127.0.0.1#40
    listen-address=127.0.0.1
  '';

  # ...
}
```
2014-11-11 22:47:19 +01:00
..
ircd-hybrid nixos/manual: Use literalExample when feasible. 2014-08-27 23:41:15 +02:00
ssh nixos/ssh: Allow user to configure the package that provides ssh/sshd 2014-09-11 22:07:39 -07:00
amuled.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
atftpd.nix More pkgs.lib -> lib fixes 2014-09-29 09:45:59 -04:00
avahi-daemon.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
bind.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
bitlbee.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
btsync.nix bittorrentsync: fix storage_path. 2014-09-19 18:19:04 +04:00
chrony.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
cjdns-hosts.sh cjdns: add peer hostnames to extraHosts, option for external config 2014-10-21 13:16:04 -04:00
cjdns.nix cjdns: service tweaks, new NixOS test 2014-11-08 23:39:02 +01:00
cntlm.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
connman.nix Get all lib functions from lib, not pkgs.lib, in modules 2014-07-02 12:28:18 -04:00
consul.nix nixos/consul: Add module 2014-09-26 03:25:14 -07:00
copy-com.nix Copy.com: client #3617 2014-09-03 11:31:51 +04:00
ddclient.nix Get all lib functions from lib, not pkgs.lib, in modules 2014-07-02 12:28:18 -04:00
dhcpcd.nix start dhcpcd after network-interfaces 2014-09-06 13:52:09 +02:00
dhcpd.nix nixos/dhcpd: Wait until network interfaces are configured to start 2014-08-13 15:08:43 -05:00
dnscrypt-proxy.nix Add dnscrypt-proxy service 2014-11-11 22:47:19 +01:00
dnsmasq.nix Fixing comment case 2014-09-03 20:03:15 +04:00
ejabberd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
firewall.nix nixos/firewall: Cleanup in case reload fails 2014-09-16 15:51:57 -07:00
flashpolicyd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
freenet.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
git-daemon.nix nixos/git-daemon: fix 'exportAll' option 2014-11-07 15:50:01 +03:00
gnunet.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
gogoclient.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
gvpe.nix Get all lib functions from lib, not pkgs.lib, in modules 2014-07-02 12:28:18 -04:00
haproxy.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
hostapd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
i2pd.nix i2pd: added package, service 2014-11-09 09:55:35 +01:00
ifplugd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
iodined.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
kippo.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
mailpile.nix mailpile: add module 2014-09-26 10:49:09 +02:00
minidlna.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
murmur.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
nat.nix nixos/nat: Fix override so that sysctls are properly preserved 2014-10-31 16:50:25 -07:00
networkmanager.nix Get all lib functions from lib, not pkgs.lib, in modules 2014-07-02 12:28:18 -04:00
ngircd.nix Add ngircd module 2014-03-19 22:04:35 -04:00
notbit.nix Get all lib functions from lib, not pkgs.lib, in modules 2014-07-02 12:28:18 -04:00
nsd.nix nixos/nsd: Improve support for journald/systemd. 2014-09-05 02:54:39 +02:00
ntopng.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
ntpd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
oidentd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
openfire.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
openntpd.nix nixos: Add new service for OpenNTPd. 2014-09-01 16:07:28 +02:00
openvpn.nix openvpn: Add systemd startup notification 2014-04-22 13:14:58 +02:00
polipo.nix drop permission prestart from polipo service module 2014-10-16 10:57:16 -04:00
prayer.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
privoxy.nix privoxy: upstart to systemd conversion, actions file editing 2014-08-27 11:34:10 -04:00
prosody.nix prosody: added websocket support 2014-10-15 03:57:00 +02:00
quassel.nix quassel: make a proper systemd unit (also properly works in containers now) 2014-11-08 14:59:25 +01:00
radicale.nix Adding Radicale package and service 2014-05-28 20:41:39 +02:00
radvd.nix nixos/radvd: Convert to a systemd unit 2014-08-24 03:12:55 -07:00
rdnssd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
rpcbind.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
sabnzbd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
searx.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
seeks.nix seeks: nixos module 2014-10-13 13:10:49 +02:00
spiped.nix nixos: only enable spipe when user specifies 2014-04-25 05:42:00 -05:00
supybot.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
syncthing.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
tcpcrypt.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
teamspeak3.nix Get all lib functions from lib, not pkgs.lib, in modules 2014-07-02 12:28:18 -04:00
tftpd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
unbound.nix unbound: run in chroot 2014-08-26 21:24:09 -04:00
unifi.nix nixos/unifi: Explain and simplify the bind mount configuration 2014-08-05 23:15:49 -05:00
vsftpd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
wakeonlan.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
websockify.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
wicd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
wpa_supplicant.nix wpa_supplicant: Restart when wlan devices (dis)appear 2014-04-28 20:12:06 +02:00
xinetd.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00
znc.nix nixos/znc: fix module, createUser option does not exist anymore 2014-09-13 02:20:32 +02:00