harden dns

2026-05-29 19:16:57 +03:00
parent e586c318c0
commit 28c69bce7f
2 changed files with 18 additions and 1 deletions
--- a/hosts/freun-dev/configuration.nix
+++ b/hosts/freun-dev/configuration.nix
@@ -106,6 +106,12 @@ in
    };
  };

+  services.resolved = {
+    enable = true;
+    dnsovertls = "opportunistic";
+    dnssec = "allow-downgrade";
+  };
+
  services.networkd-dispatcher = {
    enable = true;
    rules."50-tailscale" = {