l 2: add dnscrypt as default

1 files changed, 6 insertions, 0 deletions

diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix
index 2441f1b74..2292b5ce3 100644
--- a/lass/2configs/default.nix
+++ b/lass/2configs/default.nix
@@ -62,6 +62,12 @@ with import <stockholm/lib>;
         pkgs.pythonPackages.python
       ];
     }
+    {
+      services.dnscrypt-proxy.enable = true;
+      networking.extraResolvconfConf = ''
+        name_servers='127.0.0.1'
+      '';
+    }
   ];
 
   networking.hostName = config.krebs.build.host.name;