uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: enable dnssec

Browse source
This commit is contained in:
uku 2024-10-21 14:38:09 +02:00
parent 624b287001
commit 0569118c40
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
2 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
configs/common.nix
View file

@ -165,7 +165,7 @@ in {
resolved = { resolved = {
enable = true; enable = true;
dnssec = "allow-downgrade"; dnssec = "true";
dnsovertls = "true"; dnsovertls = "true";
}; };

5
systems/mottarone/default.nix
View file

@ -22,7 +22,10 @@
package = pkgs.nix-ld-rs; package = pkgs.nix-ld-rs;
}; };
services.resolved.dnsovertls = lib.mkForce "false"; services.resolved = {
dnssec = lib.mkForce "allow-downgrade";
dnsovertls = lib.mkForce "false";
};
virtualisation.docker.enable = true; virtualisation.docker.enable = true;
} }