···

       
10
       
10
       
 
       
  # This is somewhat more flexible than preloading the key as an

     

       
11
       
11
       
 
       
  # embedded string.

     

       
12
       
12
       
 
       
  upstreamResolverListPubKey = pkgs.fetchurl {

     

       
13
       
13
       
-
       
    url = https://raw.githubusercontent.com/jedisct1/dnscrypt-proxy/master/minisign.pub;

     

       
13
       
13
       
+
       
    url = https://raw.githubusercontent.com/dyne/dnscrypt-proxy/master/minisign.pub;

     

       
14
       
14
       
 
       
    sha256 = "18lnp8qr6ghfc2sd46nn1rhcpr324fqlvgsp4zaigw396cd7vnnh";

     

       
15
       
15
       
 
       
  };

     

       
16
       
16
       
 
       


     
···

       
258
       
258
       
 
       
        domain=raw.githubusercontent.com

     

       
259
       
259
       
 
       
        get="curl -fSs --resolve $domain:443:$(hostip -r 8.8.8.8 $domain | head -1)"

     

       
260
       
260
       
 
       
        $get -o dnscrypt-resolvers.csv.tmp \

     

       
261
       
261
       
-
       
          https://$domain/jedisct1/dnscrypt-proxy/master/dnscrypt-resolvers.csv

     

       
261
       
261
       
+
       
          https://$domain/dyne/dnscrypt-proxy/master/dnscrypt-resolvers.csv

     

       
262
       
262
       
 
       
        $get -o dnscrypt-resolvers.csv.minisig.tmp \

     

       
263
       
263
       
-
       
          https://$domain/jedisct1/dnscrypt-proxy/master/dnscrypt-resolvers.csv.minisig

     

       
263
       
263
       
+
       
          https://$domain/dyne/dnscrypt-proxy/master/dnscrypt-resolvers.csv.minisig

     

       
264
       
264
       
 
       
        mv dnscrypt-resolvers.csv.minisig{.tmp,}

     

       
265
       
265
       
 
       
        if ! minisign -q -V -p ${upstreamResolverListPubKey} \

     

       
266
       
266
       
 
       
          -m dnscrypt-resolvers.csv.tmp -x dnscrypt-resolvers.csv.minisig ; then