diff options
Diffstat (limited to 'modules/services/nixos/selfhost/adguard.nix')
| -rw-r--r-- | modules/services/nixos/selfhost/adguard.nix | 15 |
1 files changed, 8 insertions, 7 deletions
diff --git a/modules/services/nixos/selfhost/adguard.nix b/modules/services/nixos/selfhost/adguard.nix index 196dab5..eb77cf6 100644 --- a/modules/services/nixos/selfhost/adguard.nix +++ b/modules/services/nixos/selfhost/adguard.nix @@ -21,14 +21,15 @@ in }; users = []; # disable auth (only accessable over tailscale anyway) dns = { - bind_hosts = [ - ( - if config.collinux.services.networking.tailscale.enable - then tailscaleIP - else "0.0.0.0" - ) + bind_hosts = + [ + "127.0.0.1" + ] + ++ lib.optional config.collinux.services.networking.tailscale.enable tailscaleIP; + upstream_dns = [ + "https://dns.quad9.net/dns-query" ]; - upstream_dns = ["1.1.1.1"]; + enable_dnssec = true; }; tls.enabled = false; dhcp.enabled = false; |