31 lines
921 B
Nix
31 lines
921 B
Nix
{
|
|
services.blocky.enable = true;
|
|
services.blocky.settings = {
|
|
upstreams.groups.default = [
|
|
# Quad9
|
|
"tcp-tls:9.9.9.9"
|
|
"tcp-tls:149.112.112.112"
|
|
];
|
|
|
|
customDNS.customTTL = "1h";
|
|
|
|
blocking = {
|
|
denylists.ads = [
|
|
"https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt"
|
|
"https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
|
|
"http://sysctl.org/cameleon/hosts"
|
|
"https://s3.amazonaws.com/lists.disconnect.me/simple_tracking.txt"
|
|
];
|
|
blocking.denylists.special = [
|
|
"https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews/hosts"
|
|
];
|
|
|
|
clientGroupsBlock.default = [ "ads" ]; # Default only block ads, can be configured for other clients
|
|
|
|
blockType = "zeroIp";
|
|
blockTTL = "1m";
|
|
};
|
|
|
|
clientLookup.upstream = "192.168.178.1"; # Local router for reverse DNS lookup
|
|
};
|
|
}
|