modules/system/nixos/networking/resolved.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

{config, ...}: {
  networking.resolvconf.enable = false;

  networking.nameservers = [
    "9.9.9.9#dns.quad9.net"
    "149.112.112.112#dns.quad9.net"
  ];

  services.resolved = {
    enable = true;
    settings.Resolve = {
      DNSOverTLS = true;
      DNSSEC = "allow-downgrade";

      LLMNR = false;
      MulticastDNS = false;
    };
  };
}