From 1bbf98cb7c7af602dc84d35269ebd2188d759b72 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Tue, 30 Dec 2025 17:09:41 -0600
Subject: work on network configuration from jupiter

---
 modules/services/nixos/selfhost/adguard.nix | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

(limited to 'modules/services/nixos/selfhost')

diff --git a/modules/services/nixos/selfhost/adguard.nix b/modules/services/nixos/selfhost/adguard.nix
index 196dab5..eb77cf6 100644
--- a/modules/services/nixos/selfhost/adguard.nix
+++ b/modules/services/nixos/selfhost/adguard.nix
@@ -21,14 +21,15 @@ in
           };
           users = []; # disable auth (only accessable over tailscale anyway)
           dns = {
-            bind_hosts = [
-              (
-                if config.collinux.services.networking.tailscale.enable
-                then tailscaleIP
-                else "0.0.0.0"
-              )
+            bind_hosts =
+              [
+                "127.0.0.1"
+              ]
+              ++ lib.optional config.collinux.services.networking.tailscale.enable tailscaleIP;
+            upstream_dns = [
+              "https://dns.quad9.net/dns-query"
             ];
-            upstream_dns = ["1.1.1.1"];
+            enable_dnssec = true;
           };
           tls.enabled = false;
           dhcp.enabled = false;
-- 
cgit v1.3.1