summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorJoe Mou <dev@mou.fo>2024-04-26 20:40:55 -0400
committerJoe Mou <dev@mou.fo>2024-04-26 23:54:27 -0400
commitcce8a71d3192f1ae596e49e86260b8da388e7625 (patch)
treec1e7fb744a193a3c8b61ef1fafc0d2c4df291ecc
parentad89a1b695ecb8642eeb2e029f0b132cd4066a39 (diff)
elmo: blocky ad-blocking DNS
-rw-r--r--hostnix/elmo/configuration.nix1
-rw-r--r--hostnix/elmo/dns.nix22
2 files changed, 23 insertions, 0 deletions
diff --git a/hostnix/elmo/configuration.nix b/hostnix/elmo/configuration.nix
index 95eb5c6..31cf90b 100644
--- a/hostnix/elmo/configuration.nix
+++ b/hostnix/elmo/configuration.nix
@@ -2,6 +2,7 @@
{
imports = [
+ ./dns.nix
./dyndns.nix
./hardware-configuration.nix
./home-assistant.nix
diff --git a/hostnix/elmo/dns.nix b/hostnix/elmo/dns.nix
new file mode 100644
index 0000000..62331a0
--- /dev/null
+++ b/hostnix/elmo/dns.nix
@@ -0,0 +1,22 @@
+{ ... }:
+
+{
+ services.blocky = {
+ enable = true;
+ settings = {
+ upstreams.groups.default = [
+ "1.1.1.1" "1.0.0.1"
+ "2606:4700:4700::1111" "2606:4700:4700::1001"
+ ];
+ blocking = {
+ blackLists.ads = [
+ # https://jasonpearce.com/2020/09/16/how-to-disable-ads-on-the-roku-home-screen/
+ "https://www.github.developerdan.com/hosts/lists/ads-and-tracking-extended.txt"
+ ];
+ clientGroupsBlock.default = [ "ads" ];
+ };
+ };
+ };
+
+ networking.firewall.allowedUDPPorts = [ 53 ];
+}