Initial commit

modules/global/dnscrypt-proxy.nix

@@ -0,0 +1,17 @@
+{ ... }: {
+  services.dnscrypt-proxy2 = {
+    enable = true;
+    settings = {
+      # listen_addresses = [ "127.0.0.1:53" ];
+      listen_addresses = [ "0.0.0.0:53" ];
+      max_clients = 200;
+      force_tcp = true;
+      netprobe_address = "192.168.1.1:53";
+      server_names = [ "libredns-noads" "njalla-doh" ];
+    };
+  };
+
+  networking = {
+    nameservers = [ "127.0.0.1" ];
+  };
+}