stubby: added config

options/services.nix

@@ -12,5 +12,6 @@ in
     nextcloud.enable = mkEnableOption "nextcloud";
     syncthing.enable = mkEnableOption "syncthing";
     openvpn.enable = mkEnableOption "openvpn";
+    stubby.enable = mkEnableOption "stubby";
   };
 }

profiles/homeserver.nix

@@ -35,6 +35,7 @@
       nextcloud.enable = true;
       syncthing.enable = true;
       openvpn.enable = true;
+      stubby.enable = true;
     };
   };
 }

system/services/default.nix

@@ -9,5 +9,6 @@
     ./syncthing.nix
     ./kavita.nix
     ./openvpn.nix
+    ./stubby.nix
   ];
 }

system/services/stubby.nix

@@ -0,0 +1,20 @@
+{ config, lib, pkgs, ... }:
+let
+  cfg = config.profile.services.stubby;
+  inherit (lib) mkIf;
+in
+{
+  config = mkIf cfg.enable {
+    services.stubby = {
+      enable = true;
+      settings = pkgs.stubby.passthru.settingsExample // {
+        upstream_recursive_servers = [
+          {
+            address_data = "1.1.1.1";
+            tls_auth_name = "cloudflare-dns.com";
+          }
+        ];
+      };
+    };
+  };
+}