diff --git a/machines/NixOS-VPS/services/dns.nix b/machines/NixOS-VPS/services/dns.nix index 8ef80a7..5256d96 100644 --- a/machines/NixOS-VPS/services/dns.nix +++ b/machines/NixOS-VPS/services/dns.nix @@ -135,6 +135,7 @@ in { "https://raw.githubusercontent.com/crazy-max/WindowsSpyBlocker/master/data/hosts/spy.txt" "https://github.com/RPiList/specials/raw/master/Blocklisten/MS-Office-Telemetry" "https://github.com/RPiList/specials/raw/master/Blocklisten/Win10Telemetry" + ../../../misc/telemetry.hosts ]; }; clientGroupsBlock.default = [ "ads" "telemetry" ]; diff --git a/misc/telemetry.hosts b/misc/telemetry.hosts new file mode 100644 index 0000000..95db8e1 --- /dev/null +++ b/misc/telemetry.hosts @@ -0,0 +1,28 @@ +overseauspider.yuanshen.com +overseauspider.yuanshen.com +log-upload-os.hoyoverse.com +log-upload-os.hoyoverse.com +log-upload-os.mihoyo.com +log-upload-os.mihoyo.com +dump.gamesafe.qq.com +dump.gamesafe.qq.com +log-upload.mihoyo.com +log-upload.mihoyo.com +devlog-upload.mihoyo.com +devlog-upload.mihoyo.com +uspider.yuanshen.com +uspider.yuanshen.com +sg-public-data-api.hoyoverse.com +sg-public-data-api.hoyoverse.com +public-data-api.mihoyo.com +public-data-api.mihoyo.com +prd-lender.cdp.internal.unity3d.com +prd-lender.cdp.internal.unity3d.com +thind-prd-knob.data.ie.unity3d.com +thind-prd-knob.data.ie.unity3d.com +thind-gke-usc.prd.data.corp.unity3d.com +thind-gke-usc.prd.data.corp.unity3d.com +cdp.cloud.unity3d.com +cdp.cloud.unity3d.com +remote-config-proxy-prd.uca.cloud.unity3d.com +remote-config-proxy-prd.uca.cloud.unity3d.com \ No newline at end of file diff --git a/profiles/servers/blocky.nix b/profiles/servers/blocky.nix index b4b96ea..802f26d 100644 --- a/profiles/servers/blocky.nix +++ b/profiles/servers/blocky.nix @@ -74,6 +74,18 @@ in { settings = { upstream.default = [ upstream-dns ]; upstreamTimeout = "10s"; + blocking = { + blackLists.telemetry = [ ../../misc/telemetry.hosts ]; + clientGroupsBlock.default = [ "telemetry" ]; + }; + conditional = { + fallbackUpstream = true; + mapping = { + "ataraxiadev.com" = "127.0.0.1:5353"; + }; + }; + # drop ipv6 requests + filtering.queryTypes = [ "AAAA" ]; caching = { minTime = "0m"; maxTime = "12h"; @@ -86,12 +98,6 @@ in { }; prometheus.enable = true; queryLog.type = "console"; - conditional = { - fallbackUpstream = true; - mapping = { - "ataraxiadev.com" = "127.0.0.1:5353"; - }; - }; }; }; services.prometheus = {