1 files changed, 24 insertions, 0 deletions
diff --git a/modules/networking/nixos/resolved.nix b/modules/networking/nixos/resolved.nix
new file mode 100644
index 0000000..01e75e2
--- /dev/null
+++ b/modules/networking/nixos/resolved.nix
@@ -0,0 +1,24 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.system.network.dns;
+in
+  lib.mkIf (!cfg.areYouAServer) {
+    networking.nameservers = [
+      "9.9.9.9#dns.quad9.net"
+      "149.112.112.112#dns.quad9.net"
+    ];
+
+    services.resolved = {
+      enable = true;
+      settings.Resolve = {
+        DNSOverTLS = true;
+        DNSSEC = "allow-downgrade";
+
+        LLMNR = false;
+        MulticastDNS = false;
+      };
+    };
+  }