diff options
| author | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2026-02-01 09:16:48 -0600 |
|---|---|---|
| committer | Collin Williams <96917990+bluedragon1221@users.noreply.github.com> | 2026-02-01 09:16:48 -0600 |
| commit | 2a07183126da63858a287990cc7aa291b83e6d18 (patch) | |
| tree | 57b309952e7180d9aa976af90323745d7d89812a /modules/system | |
| parent | 2d84b4d1de0dc50bf50bb3cc7469db431b7708c5 (diff) | |
system update
Diffstat (limited to 'modules/system')
| -rw-r--r-- | modules/system/nixos/boot.nix | 2 | ||||
| -rw-r--r-- | modules/system/nixos/networking/resolved.nix | 11 |
2 files changed, 7 insertions, 6 deletions
diff --git a/modules/system/nixos/boot.nix b/modules/system/nixos/boot.nix index b7f5266..709a1ca 100644 --- a/modules/system/nixos/boot.nix +++ b/modules/system/nixos/boot.nix @@ -75,7 +75,7 @@ in { system.etc.overlay = { enable = true; - mutable = true; # would love this to be false, but we're not there yet + mutable = true; # necessary for installing secrets into etc }; system.nixos-init.enable = true; diff --git a/modules/system/nixos/networking/resolved.nix b/modules/system/nixos/networking/resolved.nix index 03333b1..ba2ca76 100644 --- a/modules/system/nixos/networking/resolved.nix +++ b/modules/system/nixos/networking/resolved.nix @@ -8,11 +8,12 @@ services.resolved = { enable = true; - dnsovertls = "opportunistic"; - dnssec = "allow-downgrade"; + settings.Resolve = { + DNSOverTLS = true; + DNSSEC = true; - # disable extra stuff - llmnr = "false"; - extraConfig = "MulticastDNS=no"; + LLMNR = false; + MulticastDNS = false; + }; }; } |