uku/flake
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(vesuvio): disable dnsovertls

Browse source
This commit is contained in:
uku 2024-11-27 09:51:10 +01:00
parent 4a335335d5
commit f8f95629c7
Signed by: uku
SSH key fingerprint: SHA256:4P0aN6M8ajKukNi6aPOaX0LacanGYtlfjmN+m/sHY/o
3 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
configs/common.nix
View file

@ -165,8 +165,8 @@ in {
resolved = { resolved = {
enable = true; enable = true;
dnssec = "true"; dnssec = lib.mkDefault "true";
dnsovertls = "true"; dnsovertls = lib.mkDefault "true";
}; };
tailscale = { tailscale = {

4
systems/mottarone/default.nix
View file

@ -24,7 +24,7 @@ in {
}; };
services.resolved = { services.resolved = {
dnssec = lib.mkForce "allow-downgrade"; dnssec = "allow-downgrade";
dnsovertls = lib.mkForce "false"; dnsovertls = "false";
}; };
} }

5
systems/vesuvio/default.nix
View file

@ -18,6 +18,11 @@ in {
# Needed by the Hetzner Cloud password reset feature. # Needed by the Hetzner Cloud password reset feature.
qemuGuest.enable = true; qemuGuest.enable = true;
resolved = {
dnssec = "allow-downgrade";
dnsovertls = "false";
};
frp = { frp = {
enable = true; enable = true;
role = "server"; role = "server";