From 3d2203577eb74fda0534344a5dbd61c89073a319 Mon Sep 17 00:00:00 2001
From: Dmitriy Pleshevskiy <dmitriy@pleshevski.ru>
Date: Wed, 27 Mar 2024 23:13:44 +0300
Subject: [PATCH] nixos/shared: fix encrypted dns settings

---
 nixos/shared/encrypted-dns.nix | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/nixos/shared/encrypted-dns.nix b/nixos/shared/encrypted-dns.nix
index 6b07f39..0903cc8 100644
--- a/nixos/shared/encrypted-dns.nix
+++ b/nixos/shared/encrypted-dns.nix
@@ -8,9 +8,11 @@
 
   services.dnscrypt-proxy2 = {
     enable = true;
+    # See: https://github.com/DNSCrypt/dnscrypt-proxy/blob/2.1.5/dnscrypt-proxy/example-dnscrypt-proxy.toml
     settings = {
-      ipv6_servers = true;
       require_dnssec = true;
+      require_nolog = true;
+      require_nofilter = true;
 
       sources.public-resolvers = {
         urls = [
@@ -23,8 +25,10 @@
 
       # You can choose a specific set of servers from https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v3/public-resolvers.md
       server_names = [
-        "sdns://AgMAAAAAAAAADTE1Ny45MC4xMjQuNjKgEbEC5rH2PlKJhNYCXzKxOCQfyIu9dRlXTXDJgy1T4eigWu-EP_zy7HBV9QShYvIp-DkcNw_zphY9LbPz1gTWIr4gRE69Z7uD-IB7OSHpOKyReLiCvVCq2xEjHwRM9fCN984QZG5zLmJyYWhtYS53b3JsZAovZG5zLXF1ZXJ5"
-        "sdns://AgMAAAAAAAAAF1syYTAxOjRmODoxYzFjOmY1ZTE6OjFdoBGxAuax9j5SiYTWAl8ysTgkH8iLvXUZV01wyYMtU-HooFrvhD_88uxwVfUEoWLyKfg5HDcP86YWPS2z89YE1iK-IEROvWe7g_iAezkh6TiskXi4gr1QqtsRIx8ETPXwjffOEGRucy5icmFobWEud29ybGQKL2Rucy1xdWVyeQ"
+        "ams-ads-doh-nl"
+        "ams-dnscrypt-nl"
+        "ams-doh-nl"
+        "brahma-world"
       ];
     };
   };