1
Fork 0
mirror of https://github.com/thegeneralist01/config.git synced 2026-07-21 19:05:19 +02:00

Update resolved DNS settings

This commit is contained in:
TheGeneralist 2026-06-05 14:23:04 +02:00
parent 7fd352124e
commit 9e366fe80b
Signed by: thegeneralist01
SSH key fingerprint: SHA256:pp9qddbCNmVNoSjevdvQvM5z0DHN7LTa8qBMbcMq/R4

View file

@ -1,14 +1,13 @@
{ config, lib, ... }: let
inherit (lib) mkIf concatStringsSep;
inherit (lib) mkIf;
in {
services.resolved = mkIf (!config.isServer) {
enable = true;
extraConfig = config.dnsServers
|> map (server: "DNS=${server}")
|> concatStringsSep "\n";
dnssec = "true";
dnsovertls = "true";
settings.Resolve = {
DNS = config.dnsServers;
DNSSEC = true;
DNSOverTLS = true;
};
};
}