diff options
author | Joachim Fasting <joachifm@fastmail.fm> | 2016-03-24 15:14:10 +0100 |
---|---|---|
committer | Joachim Fasting <joachifm@fastmail.fm> | 2016-03-24 17:14:22 +0100 |
commit | 1ca46105773a318dbd5d9a53e9704610de43b209 (patch) | |
tree | 0a04867a2044c7c079fb205cfc568abb093e4b74 | |
parent | 9bf6e6486031db37a6507156feb23b369ccebdcb (diff) | |
download | nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.gz nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.bz2 nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.lz nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.xz nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.zst nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.zip |
dnscrypt-proxy service: change default upstream resolver
Previously, the cisco resolver was used on the theory that it would provide the best user experience regardless of location. The downsides of cisco are 1) logging; 2) missing supoprt for DNS security extensions. The new upstream resolver is located in Holland, supports DNS security, and *claims* to not log activity. For users outside of Europe, this will mean reduced performance, but I believe it's a worthy tradeoff.
-rw-r--r-- | nixos/modules/services/networking/dnscrypt-proxy.nix | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.nix b/nixos/modules/services/networking/dnscrypt-proxy.nix index 2c5c82f4d55c..886bfc30468e 100644 --- a/nixos/modules/services/networking/dnscrypt-proxy.nix +++ b/nixos/modules/services/networking/dnscrypt-proxy.nix @@ -74,13 +74,13 @@ in ''; }; resolverName = mkOption { - default = "cisco"; + default = "dnscrypt.eu-nl"; type = types.nullOr types.string; description = '' The name of the upstream DNSCrypt resolver to use. See - <filename>${resolverListFile}</filename> for alternative resolvers - (e.g., if you are concerned about logging and/or server - location). + <filename>${resolverListFile}</filename> for alternative resolvers. + The default resolver is located in Holland, supports DNS security + extensions, and claims to not keep logs. ''; }; customResolver = mkOption { |