blocky

hosts/vessel/blocky.nix

@@ -0,0 +1,22 @@
+{
+  services.blocky = {
+    enable = true;
+    settings = {
+      port = 53;
+      upstream.default = ["https://one.one.one.one/dns-query"];
+      bootstrapDns = {
+        upstream = "https://one.one.one.one/dns-query";
+        ips = ["1.1.1.1" "1.0.0.1"];
+      };
+      blocking = {
+        blackLists.ads = ["https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"];
+        clientGroupsBlock.default = ["ads"];
+      };
+      caching = {
+        minTime = "5m";
+        maxTime = "30m";
+        prefetching = true;
+      };
+    };
+  };
+}

hosts/vessel/default.nix

@@ -11,6 +11,7 @@
     inputs.hardware.nixosModules.common-pc-ssd
 
     ./backup.nix
+    ./blocky.nix
   ];
 
   nixpkgs.hostPlatform = "x86_64-linux";