unbound: optionally support DNS-over-HTTPS

unbound can be used as a DNS-over-HTTPS (DoH) server.

This is a blog post introducing the feature:

https://www.nlnetlabs.nl/news/2020/Oct/08/unbound-1.12.0-released/
This commit is contained in:
Daniel Nagy 2021-01-01 18:54:33 +01:00 committed by tomberek
parent e7433051b6
commit a40f86e390

View file

@ -18,6 +18,9 @@
#
, withSystemd ? false
, systemd ? null
# optionally support DNS-over-HTTPS as a server
, withDoH ? false
, libnghttp2
}:
stdenv.mkDerivation rec {
@ -31,7 +34,9 @@ stdenv.mkDerivation rec {
outputs = [ "out" "lib" "man" ]; # "dev" would only split ~20 kB
buildInputs = [ openssl nettle expat libevent ] ++ lib.optionals withSystemd [ pkg-config systemd ];
buildInputs = [ openssl nettle expat libevent ]
++ lib.optionals withSystemd [ pkg-config systemd ]
++ lib.optionals withDoH [ libnghttp2 ];
configureFlags = [
"--with-ssl=${openssl.dev}"
@ -47,6 +52,8 @@ stdenv.mkDerivation rec {
"--disable-flto"
] ++ lib.optionals withSystemd [
"--enable-systemd"
] ++ lib.optionals withDoH [
"--with-libnghttp2=${libnghttp2.dev}"
];
installFlags = [ "configfile=\${out}/etc/unbound/unbound.conf" ];