feat: enable blocky for rpis

konradmalik · Nov 14, 2024 · 51dc955 · 51dc955
1 parent da26e0b
commit 51dc955
Show file tree

Hide file tree

Showing 2 changed files with 38 additions and 0 deletions.
diff --git a/hosts/rpi4-1/default.nix b/hosts/rpi4-1/default.nix
@@ -9,6 +9,8 @@
 
   networking.firewall.enable = false;
 
+  services.blocky.enable = true;
+
   konrad.services = {
     autoupgrade = {
       enable = true;

diff --git a/hosts/rpi4-2/default.nix b/hosts/rpi4-2/default.nix
@@ -11,4 +11,40 @@
   };
 
   networking.firewall.enable = false;
+
+  services.blocky = {
+    enable = true;
+    settings = {
+      ports = {
+        dns = 53;
+        http = 4000;
+      };
+      upstreams = {
+        groups = {
+          default = [
+            "1.1.1.1"
+            "9.9.9.9"
+            "8.8.8.8"
+          ];
+        };
+      };
+      blocking = {
+        denylists = {
+          ads = [
+            "https://s3.amazonaws.com/lists.disconnect.me/simple_ad.txt"
+            "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"
+          ];
+          fakenews = [
+            "https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/fakenews/hosts"
+          ];
+        };
+        clientGroupsBlock = {
+          default = [
+            "ads"
+            "fakenews"
+          ];
+        };
+      };
+    };
+  };
 }