From e29dd8a2283399b7e046937340509d5aec4b52ba Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Wed, 29 Jul 2026 06:54:49 -0500
Subject: changes

---
 modules/networking/nixos/resolved.nix | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)
 create mode 100644 modules/networking/nixos/resolved.nix

(limited to 'modules/networking/nixos/resolved.nix')

diff --git a/modules/networking/nixos/resolved.nix b/modules/networking/nixos/resolved.nix
new file mode 100644
index 0000000..01e75e2
--- /dev/null
+++ b/modules/networking/nixos/resolved.nix
@@ -0,0 +1,24 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  cfg = config.collinux.system.network.dns;
+in
+  lib.mkIf (!cfg.areYouAServer) {
+    networking.nameservers = [
+      "9.9.9.9#dns.quad9.net"
+      "149.112.112.112#dns.quad9.net"
+    ];
+
+    services.resolved = {
+      enable = true;
+      settings.Resolve = {
+        DNSOverTLS = true;
+        DNSSEC = "allow-downgrade";
+
+        LLMNR = false;
+        MulticastDNS = false;
+      };
+    };
+  }
-- 
cgit v1.3.1