pinwheel: Set DNS servers

2023-10-02 16:36:33 +02:00
parent 3663797674
commit 3736e5757c
2 changed files with 17 additions and 2 deletions
--- a/hosts/pinwheel/modules/openvpn/default.nix
+++ b/hosts/pinwheel/modules/openvpn/default.nix
@@ -5,7 +5,7 @@ in
 {
  options = {
    mod.openvpn = {
-      enable = lib.mkEnableOption "add openvpn related packages";
+      enable = lib.mkEnableOption "enable openpn module";
    };
  };

@@ -17,6 +17,17 @@ in
      ];
    };

-    services.resolved.enable = true;
+    services.resolved = {
+      enable = true;
+      dnssec = "true";
+      domains = [ "~." ];
+      fallbackDns = [
+        "1.1.1.1#one.one.one.one"
+        "1.0.0.1#one.one.one.one"
+      ];
+      extraConfig = ''
+        DNSOverTLS=yes
+      '';
+    };
  };
 }