Slack blocking on work computer - website blocking

Help
1

I am building a NixOs work computer. But I would like to block time consuming web site on my
work computer, like YouTube and Facebook, since my self control are weak at times. :frowning:

I have tried to setup blocky, but I can not get it to work.
blocky is running , but it don’t block YouTube or Facebook.

Here is my blocky configuration file.

blocking:
  blackLists:
    ads:
    - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
    adult:
    - https://blocklistproject.github.io/Lists/porn.txt
    slack:
    - |
      example.com
      youtube.com
      youtube-ui.l.google.com
      www.youtube.com
      youtube.de
      www.youtube.com
      m.youtube.com
      youtu.be
      facebook.com
      facebook.net
      fbcdn.net
      fbsbx.com
      facebook.com
      messenger.com
      xx.fbcdn.net
      xy.fbcdn.net
      xz.fbcdn.net
      facebook.com
      messenger.com
  clientGroupsBlock:
    default:
    - ads
    - slack
    kids-ipad:
    - ads
    - adult
bootstrapDns:
  ips:
  - 1.1.1.1
  - 1.0.0.1
  upstream: https://one.one.one.one/dns-query
ports:
  dns: 53
upstreams:
  groups:
    default:
    - 84.238.0.130
    - 84.238.6.254
    - 192.168.1.1
2

Your machine might not be using blocky as a DNS service. If you’re using static IP try using networking.nameservers = [ "127.0.0.1" ];.

3

You might be right in your first statement. As for IP I am behind my own router, my ISP gives me a dynamic IP.

[shs@cynix:~]$ nix-shell -p dig

[nix-shell:~]$ nslookup youtube.com
Server:		84.238.0.130
Address:	84.238.0.130#53

Non-authoritative answer:
Name:	youtube.com
Address: 142.250.74.174
Name:	youtube.com
Address: 2a00:1450:400f:805::200e


[nix-shell:~]$ ifconfig 
eno1: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        ether 74:27:ea:52:63:a7  txqueuelen 1000  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
        device interrupt 20  memory 0xf7d00000-f7d20000  

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 84  bytes 7480 (7.3 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 84  bytes 7480 (7.3 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

wlp0s29u1u1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.110  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fde4:9a1a:b30d:0:c822:6efc:5282:b769  prefixlen 64  scopeid 0x0<global>
        inet6 fe80::aaea:7980:5b0f:978  prefixlen 64  scopeid 0x20<link>
        inet6 fde4:9a1a:b30d:0:3966:8bfe:2268:2da5  prefixlen 64  scopeid 0x0<global>
        ether 00:22:b0:0d:17:97  txqueuelen 1000  (Ethernet)
        RX packets 652099  bytes 847408801 (808.1 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 343106  bytes 50809312 (48.4 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
4

So, 84.238.0.130 is used as DNS. You should change your blocky upstream to that IP and try networking.nameservers = [ "127.0.0.1" ]. Then nslookup should show Server: 127.0.0.1.

5

The blocking step is now working, if I start blocky manually.

The next problem is that , getting configuration.nix to generate the correct yaml config file.

The problem is generating the inline code, under the slack group.

blocking:
  blackLists:
    ads:
    - https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts
    adult:
    - https://blocklistproject.github.io/Lists/porn.txt
    slack:
    - |
      www.youtube.com
      www.facebook.com

The entry in my configuration.nix look like this.

  networking.nameservers = [ "127.0.0.1" ];

  services.blocky = {
    enable = true;
    # enable = false;
    settings = {
      ports.dns = 53; # Port for incoming DNS Queries.
      upstreams.groups.default = [ "84.238.0.130" "84.238.6.254" "192.168.1.1" ];

      # For initially solving DoH/DoT Requests when no system Resolver is available.
      bootstrapDns = {
        upstream = "https://one.one.one.one/dns-query";
        ips = [ "1.1.1.1" "1.0.0.1" ];
      };
      #Enable Blocking of certian domains.
      blocking = {
        blackLists = {
          #Adblocking
          ads = ["https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts"];
          #Another filter for blocking adult sites
          adult = ["https://blocklistproject.github.io/Lists/porn.txt"];
          #You can add additional categories
          slack = [ "www.youtube.com" "www.facebook.com"  ]; 
        };
     
      #Configure what block categories are used
      	clientGroupsBlock = {
        	default = [ "ads" "slack" ];
        	kids-ipad = ["ads" "adult"];
      	};
      };	
    };
  };
6

Defining the inline code like this

          slack = [ "|\nwww.youtube.com\nwww.facebook.com" ];

will generate YAML like this.

    slack:
    - '|

      www.youtube.com

      www.facebook.com'

It don’t look perfect, but it actually works.

7

Alternatively you could use the function pkgs.formats.yaml { } as in

(pkgs.formats.yaml { }).generate "yamlfile" {
  slack = [ "www.youtube.com" "www.facebook.com" ];
}
2 Likes
8

You could also also use a multi-line string:

          slack = [ ''|
            www.youtube.com
            www.facebook.com
          '' ];