diff options
| author | Minijackson <minijackson@riseup.net> | 2022-06-07 19:00:43 +0200 |
|---|---|---|
| committer | Minijackson <minijackson@riseup.net> | 2022-06-07 19:04:47 +0200 |
| commit | 18b782a8308d478411dd578d07f0f9d3ddf57cc9 (patch) | |
| tree | 7aa0d6d5edc33d4771840b6ed0d8ca2e8103a71c /usecases | |
| parent | 561260982547728edbba042ce9bdacdc590f7458 (diff) | |
| download | nixos-config-reborn-18b782a8308d478411dd578d07f0f9d3ddf57cc9.tar.gz nixos-config-reborn-18b782a8308d478411dd578d07f0f9d3ddf57cc9.zip | |
dnscrypt: handle resolved configuration
Diffstat (limited to 'usecases')
| -rw-r--r-- | usecases/common/dnscrypt.nix | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/usecases/common/dnscrypt.nix b/usecases/common/dnscrypt.nix index 151f428..2991ed6 100644 --- a/usecases/common/dnscrypt.nix +++ b/usecases/common/dnscrypt.nix | |||
| @@ -74,8 +74,18 @@ inputs: | |||
| 74 | 74 | ||
| 75 | networking.resolvconf.useLocalResolver = true; | 75 | networking.resolvconf.useLocalResolver = true; |
| 76 | 76 | ||
| 77 | # Do not use per-link DNS servers for systemd-resolved | ||
| 78 | services.resolved = { | ||
| 79 | domains = [ "~." ]; | ||
| 80 | dnssec = "false"; | ||
| 81 | }; | ||
| 82 | |||
| 77 | specialisation.defaultDNS.configuration = { | 83 | specialisation.defaultDNS.configuration = { |
| 78 | networking.resolvconf.useLocalResolver = lib.mkForce false; | 84 | networking.resolvconf.useLocalResolver = lib.mkForce false; |
| 79 | services.dnscrypt-proxy2.enable = lib.mkForce false; | 85 | services.dnscrypt-proxy2.enable = lib.mkForce false; |
| 86 | services.resolved = { | ||
| 87 | domains = lib.mkForce config.networking.search; | ||
| 88 | dnssec = lib.mkForce "true"; | ||
| 89 | }; | ||
| 80 | }; | 90 | }; |
| 81 | } | 91 | } |