Run a DNS server
diff --git a/modules/dnsmasq.nix b/modules/dnsmasq.nix
new file mode 100644
index 0000000..6f9d768
--- /dev/null
+++ b/modules/dnsmasq.nix
@@ -0,0 +1,17 @@
+{ config, ... }: {
+ config = {
+ services.dnsmasq = {
+ enable = true;
+ servers = [ "1.1.1.1" "1.0.0.1" ];
+
+ extraConfig = ''
+ conf-file=${config.sops.secrets."dnsmasq-private.conf".path}
+ '';
+ };
+
+ sops.secrets."dnsmasq-private.conf" = {
+ format = "binary";
+ sopsFile = ../secrets/dnsmasq-private.conf;
+ };
+ };
+}
diff --git a/secrets/dnsmasq-private.conf b/secrets/dnsmasq-private.conf
new file mode 100644
index 0000000..bcdbb19
--- /dev/null
+++ b/secrets/dnsmasq-private.conf
@@ -0,0 +1,26 @@
+{
+ "data": "ENC[AES256_GCM,data:CoLLgIRvRHk23BGgLk9rvCcmRAnKac4dBDDtcbpaRA==,iv:PsG3a9QIEpcLST92iH3eBNS7T0gpsAhhpmuWtDamMWY=,tag:2uJW/RSFvkxMQiTpGvJPMQ==,type:str]",
+ "sops": {
+ "kms": null,
+ "gcp_kms": null,
+ "azure_kv": null,
+ "hc_vault": null,
+ "age": null,
+ "lastmodified": "2022-10-24T07:41:58Z",
+ "mac": "ENC[AES256_GCM,data:XxjJvrFIBdtY4zRxLDRuGCP16kLvBq00L61eirSdfYvfNi578BV7s6l1SNuxH8jwew5WZD7r/lHBbwwndMPiuNn3VG1fsIGgayP7gg8E0IEc8rwdX/7GBoe0mUGiGWRpg8KCva+sVhO/tY05T/BWA5krapc+BH3z3fxExjHkyRQ=,iv:jll9wX65HKyzsyECZzgLS+jhwQVrHXipZT0vsUCt+gs=,tag:ik918Ub2f098a7VpsQfXWA==,type:str]",
+ "pgp": [
+ {
+ "created_at": "2022-10-24T07:40:37Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n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\ntikgnCKxQGVlhVw+Ws7FDu9yqcgY5V7KLtvJ/DC/l+Fz0A==\n=mWRv\n-----END PGP MESSAGE-----",
+ "fp": "D520AC8D7C9692125B2BBD3A1AFD10256B3C714D"
+ },
+ {
+ "created_at": "2022-10-24T07:40:37Z",
+ "enc": "-----BEGIN PGP MESSAGE-----\n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\nWAK1KJIUCLOhwYd3igJJw8RBzJEf5HDZolfeAVFqHRLEBSR4By4QAzw=\n=qkjY\n-----END PGP MESSAGE-----\n",
+ "fp": "B2EEB25AFB4C3A2EC7FAC3A43676C8DC50D24FF6"
+ }
+ ],
+ "unencrypted_suffix": "_unencrypted",
+ "version": "3.7.3"
+ }
+}
\ No newline at end of file