diff options
| author | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2025-12-30 17:09:41 -0600 |
|---|---|---|
| committer | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2025-12-30 17:09:41 -0600 |
| commit | 1bbf98cb7c7af602dc84d35269ebd2188d759b72 (patch) | |
| tree | 769b5c23b9a29fa683ad2da404a35e5c351b92de /modules/services/nixos/selfhost | |
| parent | cef3b9ad86452be2eb47c8a438b974c8884b0f3e (diff) | |
work on network configuration from jupiter
Diffstat (limited to 'modules/services/nixos/selfhost')
| -rw-r--r-- | modules/services/nixos/selfhost/adguard.nix | 15 |
1 files changed, 8 insertions, 7 deletions
diff --git a/modules/services/nixos/selfhost/adguard.nix b/modules/services/nixos/selfhost/adguard.nix index 196dab5..eb77cf6 100644 --- a/modules/services/nixos/selfhost/adguard.nix +++ b/modules/services/nixos/selfhost/adguard.nix @@ -21,14 +21,15 @@ in }; users = []; # disable auth (only accessable over tailscale anyway) dns = { - bind_hosts = [ - ( - if config.collinux.services.networking.tailscale.enable - then tailscaleIP - else "0.0.0.0" - ) + bind_hosts = + [ + "127.0.0.1" + ] + ++ lib.optional config.collinux.services.networking.tailscale.enable tailscaleIP; + upstream_dns = [ + "https://dns.quad9.net/dns-query" ]; - upstream_dns = ["1.1.1.1"]; + enable_dnssec = true; }; tls.enabled = false; dhcp.enabled = false; |