大きいＢＯＹ

How do you host your DNS sinkhole/resolver?

Like this, baby:

services.adguardhome = {
      enable = true;
      mutableSettings = false;
      openFirewall = true;
      settings = {
        dns = {
          # Web Interface
          bootstrap_dns = ["9.9.9.9" "149.112.112.112"];
          upstream_dns = ["https://dns.quad9.net/dns-query"];
          fallback_dns = ["tls://dns.quad9.net"];
        };
        filters = [
          {
            name = "AdGuard DNS filter";
            url = "https://adguardteam.github.io/HostlistsRegistry/assets/filter_1.txt";
            enabled = true;
          }
        ];
        filtering = {
          blocked_services = {
            ids = [
            ];
          };
          protection_enabled = true;
          filtering_enabled = true;
          rewrites = [
          ];
        };

Deploy to the main home server, and the backup instance. NixOS is fucking awesome. No sync tool needed.

Iron fox is another option.

… Because products can contain security exploits, and if not patched could leave homes and businesses vulnerable.

This shouldn’t need to be explained, but here we are.

Think? We fucking know.

Polysics. Great energy.

It annoys me that this is not on by default…

Now I need to go watch “Prey”, again.

Doesn’t this still work on some characters because ASCII is a subset of Unicode?

… You know that feeling when you get nerd sniped. 😭

This falls under enshitification, no?

You would have to actively work to do so. Even then, recovery is pretty easy.

… Footlong sub. BLT subs. Goddamn, I’m hungry now.

Laughs in NixOS.