98 lines
2.9 KiB
Nix
98 lines
2.9 KiB
Nix
|
{ ... }: {
|
||
|
|
services.blocky = {
|
||
|
|
enable = true;
|
||
|
|
# REF: https://0xerr0r.github.io/blocky/main/configuration/
|
||
|
|
settings = {
|
||
|
|
bootstrapDns = "tcp+udp:1.1.1.1";
|
||
|
|
ports.dns = 53;
|
||
|
|
# connectIPVersion = "v4";
|
||
|
|
# httpPort = "80";
|
||
|
|
upstreams.groups = {
|
||
|
|
default = [
|
||
|
|
"https://dns.quad9.net/dns-query"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
caching = {
|
||
|
|
maxItemsCount = 100000;
|
||
|
|
maxTime = "30m";
|
||
|
|
minTime = "5m";
|
||
|
|
prefetchExpires = "2h";
|
||
|
|
prefetchMaxItemsCount = 100000;
|
||
|
|
prefetchThreshold = 5;
|
||
|
|
prefetching = true;
|
||
|
|
};
|
||
|
|
blocking = {
|
||
|
|
blockTTL = "1m";
|
||
|
|
blockType = "zeroIP";
|
||
|
|
loading = {
|
||
|
|
refreshPeriod = "24h";
|
||
|
|
strategy = "blocking";
|
||
|
|
downloads = {
|
||
|
|
attempts = 3;
|
||
|
|
cooldown = "10s";
|
||
|
|
timeout = "5m";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
# SRC: https://oisd.nl
|
||
|
|
# SRC: https://v.firebog.net
|
||
|
|
denylists = {
|
||
|
|
suspicious = [
|
||
|
|
"https://raw.githubusercontent.com/PolishFiltersTeam/KADhosts/master/KADhosts.txt"
|
||
|
|
"https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" # https://github.com/StevenBlack/hosts
|
||
|
|
"https://v.firebog.net/hosts/static/w3kbl.txt"
|
||
|
|
];
|
||
|
|
ads = [
|
||
|
|
"https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext"
|
||
|
|
"https://raw.githubusercontent.com/bigdargon/hostsVN/master/hosts"
|
||
|
|
"https://v.firebog.net/hosts/AdguardDNS.txt"
|
||
|
|
"https://v.firebog.net/hosts/Admiral.txt"
|
||
|
|
"https://v.firebog.net/hosts/Easylist.txt"
|
||
|
|
];
|
||
|
|
tracking = [
|
||
|
|
"https://hostfiles.frogeye.fr/firstparty-trackers-hosts.txt"
|
||
|
|
"https://v.firebog.net/hosts/Easyprivacy.txt"
|
||
|
|
"https://v.firebog.net/hosts/Prigent-Ads.txt"
|
||
|
|
];
|
||
|
|
malicious = [
|
||
|
|
"https://gitlab.com/quidsup/notrack-blocklists/raw/master/notrack-malware.txt"
|
||
|
|
"https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt"
|
||
|
|
"https://phishing.army/download/phishing_army_blocklist_extended.txt"
|
||
|
|
"https://raw.githubusercontent.com/AssoEchap/stalkerware-indicators/master/generated/hosts"
|
||
|
|
"https://raw.githubusercontent.com/Spam404/lists/master/main-blacklist.txt"
|
||
|
|
"https://urlhaus.abuse.ch/downloads/hostfile/"
|
||
|
|
"https://v.firebog.net/hosts/Prigent-Crypto.txt"
|
||
|
|
"https://v.firebog.net/hosts/Prigent-Malware.txt"
|
||
|
|
];
|
||
|
|
other = [
|
||
|
|
"https://big.oisd.nl/domainswild"
|
||
|
|
"https://zerodot1.gitlab.io/CoinBlockerLists/hosts_browser"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
# allowlists = {
|
||
|
|
# other = [
|
||
|
|
# "/.*.vk.com/"
|
||
|
|
# ];
|
||
|
|
# };
|
||
|
|
clientGroupsBlock = {
|
||
|
|
default = [
|
||
|
|
"ads"
|
||
|
|
"malicious"
|
||
|
|
"other"
|
||
|
|
"suspicious"
|
||
|
|
"tracking"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
customDNS.mapping = let
|
||
|
|
block = host: { ${host} = "0.0.0.0"; };
|
||
|
|
in {
|
||
|
|
"voronind.com" = "10.0.0.1,fd09:8d46:b26::1";
|
||
|
|
}
|
||
|
|
// block "gosuslugi.ru"
|
||
|
|
// block "rutube.ru"
|
||
|
|
# // block "vk.com"
|
||
|
|
;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|