From 9e840fc7632938ba9c1d0c4d8d8111e3b1a139d9 Mon Sep 17 00:00:00 2001
From: unman <unman@thirdeyesecurity.org>
Date: Wed, 19 Mar 2025 11:57:14 +0000
Subject: [PATCH] DNSCrypt - configuration for sys-dnscrypt

---
 dnscrypt/configure.sls | 17 +++++++++++++++++
 dnscrypt/configure.top |  5 +++++
 2 files changed, 22 insertions(+)
 create mode 100644 dnscrypt/configure.sls
 create mode 100644 dnscrypt/configure.top

diff --git a/dnscrypt/configure.sls b/dnscrypt/configure.sls
new file mode 100644
index 0000000..c2cbda8
--- /dev/null
+++ b/dnscrypt/configure.sls
@@ -0,0 +1,17 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+{% if grains['nodename'] != 'dom0' %}
+new_resolv.conf:
+  file.managed:
+    - name: /rw/config/resolv.conf
+    - source: salt://dnscrypt/resolv.conf
+
+dnscrypt_update_rc.local:
+  file.append:
+    - name: /rw/config/rc.local
+    - text: |
+        cp /etc/resolv.conf /etc/resolv.conf.backup
+        cp /rw/config/resolv.conf /etc/resolv.conf
+  
+
+{% endif %}
diff --git a/dnscrypt/configure.top b/dnscrypt/configure.top
new file mode 100644
index 0000000..665eb92
--- /dev/null
+++ b/dnscrypt/configure.top
@@ -0,0 +1,5 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+
+base:
+  sys-dnscrypt:
+    - dnscrypt.configure