1 files changed, 10 insertions, 0 deletions

diff --git a/usecases/common/dnscrypt.nix b/usecases/common/dnscrypt.nix
index 151f428..2991ed6 100644
--- a/usecases/common/dnscrypt.nix
+++ b/usecases/common/dnscrypt.nix
@@ -74,8 +74,18 @@ inputs:
 
   networking.resolvconf.useLocalResolver = true;
 
+  # Do not use per-link DNS servers for systemd-resolved
+  services.resolved = {
+    domains = [ "~." ];
+    dnssec = "false";
+  };
+
   specialisation.defaultDNS.configuration = {
     networking.resolvconf.useLocalResolver = lib.mkForce false;
     services.dnscrypt-proxy2.enable = lib.mkForce false;
+    services.resolved = {
+      domains = lib.mkForce config.networking.search;
+      dnssec = lib.mkForce "true";
+    };
   };
 }