From 2a07183126da63858a287990cc7aa291b83e6d18 Mon Sep 17 00:00:00 2001
From: Collin Williams <96917990+bluedragon1221@users.noreply.github.com>
Date: Sun, 1 Feb 2026 09:16:48 -0600
Subject: system update

---
 modules/system/nixos/boot.nix                |  2 +-
 modules/system/nixos/networking/resolved.nix | 11 ++++++-----
 2 files changed, 7 insertions(+), 6 deletions(-)

(limited to 'modules/system/nixos')

diff --git a/modules/system/nixos/boot.nix b/modules/system/nixos/boot.nix
index b7f5266..709a1ca 100644
--- a/modules/system/nixos/boot.nix
+++ b/modules/system/nixos/boot.nix
@@ -75,7 +75,7 @@ in {
 
   system.etc.overlay = {
     enable = true;
-    mutable = true; # would love this to be false, but we're not there yet
+    mutable = true; # necessary for installing secrets into etc
   };
   system.nixos-init.enable = true;
 
diff --git a/modules/system/nixos/networking/resolved.nix b/modules/system/nixos/networking/resolved.nix
index 03333b1..ba2ca76 100644
--- a/modules/system/nixos/networking/resolved.nix
+++ b/modules/system/nixos/networking/resolved.nix
@@ -8,11 +8,12 @@
 
   services.resolved = {
     enable = true;
-    dnsovertls = "opportunistic";
-    dnssec = "allow-downgrade";
+    settings.Resolve = {
+      DNSOverTLS = true;
+      DNSSEC = true;
 
-    # disable extra stuff
-    llmnr = "false";
-    extraConfig = "MulticastDNS=no";
+      LLMNR = false;
+      MulticastDNS = false;
+    };
   };
 }
-- 
cgit v1.3.1