mirror of
https://github.com/thegeneralist01/config.git
synced 2026-10-09 21:03:30 +02:00
TheGeneralist
bd887883f7
Move hosted services and secrets from the retired central hosts, persist USB storage and ownership, harden RTL8822BU Wi-Fi, repair DNS behavior, and order CoreDNS after Tailscale.
13 lines
261 B
Nix
13 lines
261 B
Nix
{ config, lib, ... }: let
|
|
inherit (lib) mkIf;
|
|
in {
|
|
services.resolved = mkIf (!config.isServer) {
|
|
enable = true;
|
|
|
|
settings.Resolve = {
|
|
DNS = config.dnsServers;
|
|
DNSSEC = "allow-downgrade";
|
|
DNSOverTLS = "opportunistic";
|
|
};
|
|
};
|
|
}
|