From d4db2f41db471ee25a03d9cdae37f55301b98f22 Mon Sep 17 00:00:00 2001
From: Tim Keller <tjk@tjkeller.xyz>
Date: Tue, 30 Dec 2025 23:38:51 -0600
Subject: unbound config in router profile is now services/router/dns.nix.
 unbound + dnsmasq config for local resolution and dhcp

---
 archetypes/profiles/router/default.nix | 28 ++++++++++++++++++++++------
 1 file changed, 22 insertions(+), 6 deletions(-)

(limited to 'archetypes/profiles/router/default.nix')

diff --git a/archetypes/profiles/router/default.nix b/archetypes/profiles/router/default.nix
index 0818a6b..646982b 100644
--- a/archetypes/profiles/router/default.nix
+++ b/archetypes/profiles/router/default.nix
@@ -1,12 +1,28 @@
 { lib, pkgs, ... }: let
 	mkRouter = lib.mkOverride 800;
 
-	# TODO pass mkRouter
-	#imports = [
-	#	./unbound.nix
-	#];
-
-	nixosConfig = {};
+	nixosConfig = {
+		services.unbound = {
+			_blocklists = {
+				enable = true;
+				blocklists = {
+					hageziNSFW = [
+						"https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/rpz/nsfw.txt"
+						"https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/rpz/nsfw.txt"
+						"https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/rpz/nsfw.txt"
+					];
+					hageziPro = [
+						"https://cdn.jsdelivr.net/gh/hagezi/dns-blocklists@latest/rpz/pro.txt"
+						"https://gitlab.com/hagezi/mirror/-/raw/main/dns-blocklists/rpz/pro.txt"
+						"https://codeberg.org/hagezi/mirror2/raw/branch/main/dns-blocklists/rpz/pro.txt"
+					];
+				};
+			};
+		};
+		services._router.dnsDhcpConfig = {
+			enable = mkRouter true;
+		};
+	};
 
 	homeConfig = {};
 in {
-- 
cgit v1.2.3