From f773b81dbd8f48aaa3a15a55bb9e0d195605db5d Mon Sep 17 00:00:00 2001
From: "Casper V. Kristensen" <casper@vkristensen.dk>
Date: Mon, 7 Oct 2024 23:46:06 +0200
Subject: [PATCH] tor: use uncensored dns.caspervk.net

---
 hosts/tor/network.nix    | 9 ++++++++-
 modules/base/network.nix | 5 ++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/hosts/tor/network.nix b/hosts/tor/network.nix
index 453bfc0..ac60e16 100644
--- a/hosts/tor/network.nix
+++ b/hosts/tor/network.nix
@@ -1,4 +1,11 @@
-{...}: {
+{lib, ...}: {
+  networking = {
+    # Use dns.caspervk.net IPv6 address ::2 for uncensored DNS
+    nameservers = lib.mkForce [
+      "2a01:4f8:1c0c:70d1::2#dns.caspervk.net"
+    ];
+  };
+
   systemd.network = {
     networks."10-lan" = {
       # IPv4 settings are from `sudo dhcpcd --test`.
diff --git a/modules/base/network.nix b/modules/base/network.nix
index a706f7d..b14b6a7 100644
--- a/modules/base/network.nix
+++ b/modules/base/network.nix
@@ -10,7 +10,10 @@
       # Do not spam dmesg/journalctl with refused connections
       logRefusedConnections = false;
     };
-    nameservers = ["159.69.4.2#dns.caspervk.net" "2a01:4f8:1c0c:70d1::1#dns.caspervk.net"];
+    nameservers = [
+      "159.69.4.2#dns.caspervk.net"
+      "2a01:4f8:1c0c:70d1::1#dns.caspervk.net"
+    ];
     search = ["caspervk.net"];
   };