From 041d06a96e48e34fa4446a983500b177e3cae24a Mon Sep 17 00:00:00 2001
From: "Casper V. Kristensen" <casper@vkristensen.dk>
Date: Mon, 7 Oct 2024 23:46:06 +0200
Subject: [PATCH] tor: use uncensored dns.caspervk.net

---
 hosts/tor/network.nix    | 7 +++++++
 modules/base/network.nix | 5 ++++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/hosts/tor/network.nix b/hosts/tor/network.nix
index 453bfc0..b54ab02 100644
--- a/hosts/tor/network.nix
+++ b/hosts/tor/network.nix
@@ -1,4 +1,11 @@
 {...}: {
+  networking = {
+    # Use dns.caspervk.net IPv6 address ::2 for uncensored DNS
+    nameservers = [
+      "[2a01:4f8:1c0c:70d1::2]#dns.caspervk.net"
+    ];
+  };
+
   systemd.network = {
     networks."10-lan" = {
       # IPv4 settings are from `sudo dhcpcd --test`.
diff --git a/modules/base/network.nix b/modules/base/network.nix
index a706f7d..7b2d39f 100644
--- a/modules/base/network.nix
+++ b/modules/base/network.nix
@@ -10,7 +10,10 @@
       # Do not spam dmesg/journalctl with refused connections
       logRefusedConnections = false;
     };
-    nameservers = ["159.69.4.2#dns.caspervk.net" "2a01:4f8:1c0c:70d1::1#dns.caspervk.net"];
+    nameservers = [
+      "159.69.4.2#dns.caspervk.net"
+      "[2a01:4f8:1c0c:70d1::1]#dns.caspervk.net"
+    ];
     search = ["caspervk.net"];
   };