···

       
17
       
17
       
 
       
{

     

       
18
       
18
       
 
       
  options = {

     

       
19
       
19
       
 
       
    services.dnscrypt-proxy = {

     

       
20
       
20
       
-
       
      enable = mkOption {

     

       
21
       
21
       
-
       
        default = false;

     

       
22
       
22
       
-
       
        type = types.bool;

     

       
23
       
23
       
-
       
        description = ''

     

       
24
       
24
       
-
       
          Enable dnscrypt-proxy. The proxy relays regular DNS queries to a

     

       
25
       
25
       
-
       
          DNSCrypt enabled upstream resolver. The traffic between the

     

       
26
       
26
       
-
       
          client and the upstream resolver is encrypted and authenticated,

     

       
27
       
27
       
-
       
          which may mitigate the risk of MITM attacks and third-party

     

       
28
       
28
       
-
       
          snooping (assuming the upstream is trustworthy).

     

       
29
       
29
       
-
       
        '';

     

       
30
       
30
       
-
       
      };

     

       
20
       
20
       
+
       
      enable = mkEnableOption ''

     

       
21
       
21
       
+
       
        Enable dnscrypt-proxy. The proxy relays regular DNS queries to a

     

       
22
       
22
       
+
       
        DNSCrypt enabled upstream resolver. The traffic between the

     

       
23
       
23
       
+
       
        client and the upstream resolver is encrypted and authenticated,

     

       
24
       
24
       
+
       
        which may mitigate the risk of MITM attacks and third-party

     

       
25
       
25
       
+
       
        snooping (assuming the upstream is trustworthy).

     

       
26
       
26
       
+
       
      '';

     

       
31
       
27
       
 
       
      localAddress = mkOption {

     

       
32
       
28
       
 
       
        default = "127.0.0.1";

     

       
33
       
29
       
 
       
        type = types.string;