alex/nixos-configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pinwheel: Disable resolved.dnssec

Browse Source 
As it breaks tailscale <-> openvpn

> At the time of September 2023, systemd upstream advise to disable DNSSEC
> by default as the current code is not robust enough to deal with
> “in the wild” non-compliant servers, which will usually give you a
> broken bad experience in addition of insecure.
This commit is contained in:
Alexander Heldt
2025-10-19 14:39:05 +02:00
parent cefd4a966c
commit 67134682d9
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/pinwheel/modules/openvpn/default.nix
View File

@@ -23,7 +23,7 @@ in
services.resolved = { services.resolved = {
enable = true; enable = true;
dnssec = "true"; dnssec = "false";
domains = [ "~." ]; domains = [ "~." ];
fallbackDns = [ fallbackDns = [
"1.1.1.1#one.one.one.one" "1.1.1.1#one.one.one.one"