harden dns

2026-05-29 19:16:57 +03:00
parent e586c318c0
commit 28c69bce7f
2 changed files with 18 additions and 1 deletions
--- a/modules/services/adguardhome.nix
+++ b/modules/services/adguardhome.nix
@@ -46,7 +46,18 @@ in
          certificate_chain_path = "/run/credentials/adguardhome.service/fullchain.pem";
          private_key_path = "/run/credentials/adguardhome.service/key.pem";
        };
-        dns.bind_hosts = tailscaleIps;
+        dns = {
+          bind_hosts = tailscaleIps;
+          upstream_dns = [
+            "https://dns10.quad9.net/dns-query"
+            "https://cloudflare-dns.com/dns-query"
+            "https://dns.google/dns-query"
+          ];
+          fallback_dns = [
+            "https://cloudflare-dns.com/dns-query"
+            "https://dns.google/dns-query"
+          ];
+        };
      };
    };