2 files changed, 7 insertions, 6 deletions
diff --git a/modules/system/nixos/boot.nix b/modules/system/nixos/boot.nix
index b7f5266..709a1ca 100644
--- a/modules/system/nixos/boot.nix
+++ b/modules/system/nixos/boot.nix
@@ -75,7 +75,7 @@ in {
 
   system.etc.overlay = {
     enable = true;
-    mutable = true; # would love this to be false, but we're not there yet
+    mutable = true; # necessary for installing secrets into etc
   };
   system.nixos-init.enable = true;
 
diff --git a/modules/system/nixos/networking/resolved.nix b/modules/system/nixos/networking/resolved.nix
index 03333b1..ba2ca76 100644
--- a/modules/system/nixos/networking/resolved.nix
+++ b/modules/system/nixos/networking/resolved.nix
@@ -8,11 +8,12 @@
 
   services.resolved = {
     enable = true;
-    dnsovertls = "opportunistic";
-    dnssec = "allow-downgrade";
+    settings.Resolve = {
+      DNSOverTLS = true;
+      DNSSEC = true;
 
-    # disable extra stuff
-    llmnr = "false";
-    extraConfig = "MulticastDNS=no";
+      LLMNR = false;
+      MulticastDNS = false;
+    };
   };
 }