summary refs log tree commit diff
path: root/nixos
diff options
context:
space:
mode:
authorJoachim Fasting <joachifm@fastmail.fm>2015-03-23 20:44:55 +0100
committerJoachim Fasting <joachifm@fastmail.fm>2015-06-12 15:12:33 +0200
commit8131065b63601b40e21ad9e9f841b5e5fa2e0fd5 (patch)
treecdfd36f55b186c36833c1e27d2b9c840be128b16 /nixos
parent2e8bc2bd5c264cf30bfb9b357e2a2b64416002e1 (diff)
downloadnixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.tar
nixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.tar.gz
nixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.tar.bz2
nixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.tar.lz
nixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.tar.xz
nixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.tar.zst
nixpkgs-8131065b63601b40e21ad9e9f841b5e5fa2e0fd5.zip
dnscrypt-proxy service: use mkEnableOption
Diffstat (limited to 'nixos')
-rw-r--r--nixos/modules/services/networking/dnscrypt-proxy.nix18
1 files changed, 7 insertions, 11 deletions
diff --git a/nixos/modules/services/networking/dnscrypt-proxy.nix b/nixos/modules/services/networking/dnscrypt-proxy.nix
index 4505ce31d0f..b4801dc5551 100644
--- a/nixos/modules/services/networking/dnscrypt-proxy.nix
+++ b/nixos/modules/services/networking/dnscrypt-proxy.nix
@@ -17,17 +17,13 @@ in
 {
   options = {
     services.dnscrypt-proxy = {
-      enable = mkOption {
-        default = false;
-        type = types.bool;
-        description = ''
-          Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
-          DNSCrypt enabled upstream resolver. The traffic between the
-          client and the upstream resolver is encrypted and authenticated,
-          which may mitigate the risk of MITM attacks and third-party
-          snooping (assuming the upstream is trustworthy).
-        '';
-      };
+      enable = mkEnableOption ''
+        Enable dnscrypt-proxy. The proxy relays regular DNS queries to a
+        DNSCrypt enabled upstream resolver. The traffic between the
+        client and the upstream resolver is encrypted and authenticated,
+        which may mitigate the risk of MITM attacks and third-party
+        snooping (assuming the upstream is trustworthy).
+      '';
       localAddress = mkOption {
         default = "127.0.0.1";
         type = types.string;