From 9e366fe80b588e39f460bef7df61052b673c9dd3 Mon Sep 17 00:00:00 2001
From: TheGeneralist <180094941+thegeneralist01@users.noreply.github.com>
Date: Fri, 5 Jun 2026 14:23:04 +0200
Subject: [PATCH] Update resolved DNS settings

---
 modules/linux/dns.nix | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/modules/linux/dns.nix b/modules/linux/dns.nix
index d900e1f..deb39ec 100644
--- a/modules/linux/dns.nix
+++ b/modules/linux/dns.nix
@@ -1,14 +1,13 @@
 { config, lib, ... }: let
-  inherit (lib) mkIf concatStringsSep;
+  inherit (lib) mkIf;
 in {
   services.resolved = mkIf (!config.isServer) {
     enable = true;
 
-    extraConfig = config.dnsServers
-      |> map (server: "DNS=${server}")
-      |> concatStringsSep "\n";
-
-    dnssec     = "true";
-    dnsovertls = "true";
+    settings.Resolve = {
+      DNS = config.dnsServers;
+      DNSSEC = true;
+      DNSOverTLS = true;
+    };
   };
 }