summary refs log tree commit diff
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2016-03-24 15:14:10 +0100
committerJoachim Fasting <joachifm@fastmail.fm>2016-03-24 17:14:22 +0100
commit1ca46105773a318dbd5d9a53e9704610de43b209 (patch)
tree0a04867a2044c7c079fb205cfc568abb093e4b74
parent9bf6e6486031db37a6507156feb23b369ccebdcb (diff)
downloadnixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar
nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.gz
nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.bz2
nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.lz
nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.xz
nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.tar.zst
nixlib-1ca46105773a318dbd5d9a53e9704610de43b209.zip
dnscrypt-proxy service: change default upstream resolver
Previously, the cisco resolver was used on the theory that it would
provide the best user experience regardless of location.  The downsides
of cisco are 1) logging; 2) missing supoprt for DNS security extensions.

The new upstream resolver is located in Holland, supports DNS security,
and *claims* to not log activity. For users outside of Europe, this will
mean reduced performance, but I believe it's a worthy tradeoff.
-rw-r--r--nixos/modules/services/networking/dnscrypt-proxy.nix8
1 files changed, 4 insertions, 4 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.nix b/nixos/modules/services/networking/dnscrypt-proxy.nix
index 2c5c82f4d55c..886bfc30468e 100644
--- a/nixos/modules/services/networking/dnscrypt-proxy.nix
+++ b/nixos/modules/services/networking/dnscrypt-proxy.nix
@@ -74,13 +74,13 @@ in
         '';
       };
       resolverName = mkOption {
-        default = "cisco";
+        default = "dnscrypt.eu-nl";
         type = types.nullOr types.string;
         description = ''
           The name of the upstream DNSCrypt resolver to use. See
-          <filename>${resolverListFile}</filename> for alternative resolvers
-          (e.g., if you are concerned about logging and/or server
-          location).
+          <filename>${resolverListFile}</filename> for alternative resolvers.
+          The default resolver is located in Holland, supports DNS security
+          extensions, and claims to not keep logs.
         '';
       };
       customResolver = mkOption {