hosts/modularization

modules/nixos/networking/zapret.nix

@@ -0,0 +1,51 @@
+{
+  services.dnscrypt-proxy = {
+    enable = true;
+
+    settings = {
+      listen_addresses = [
+        "127.0.0.1:53"
+        "[::1]:53"
+      ];
+
+      ignore_system_dns = true;
+
+      bootstrap_resolvers = [
+        "9.9.9.9:53"
+        "149.112.112.112:53"
+        "1.1.1.1:53"
+      ];
+
+      fallback_resolvers = [
+        "9.9.9.9:53"
+        "1.1.1.1:53"
+      ];
+    };
+  };
+
+  systemd.services.zapret = {
+    after = ["network-online.target"];
+    wants = ["network-online.target"];
+  };
+
+  services.zapret = {
+    enable = true;
+
+    params = [
+      "--dpi-desync=fake"
+      "--dpi-desync-ttl=8"
+    ];
+  };
+
+  networking = {
+    networkmanager = {
+      enable = true;
+      dns = "none";
+    };
+
+    nameservers = [
+      "127.0.0.1"
+      "::1"
+    ];
+  };
+}