From f8c060a0ccbc5a945ed4a1838c3d1789e8666ec5 Mon Sep 17 00:00:00 2001
From: Alexander Heldt <me@alexanderheldt.se>
Date: Sun, 8 Feb 2026 21:07:21 +0100
Subject: [PATCH] pinwheel: Fix `openvpn` config

---
 hosts/pinwheel/modules/openvpn/default.nix | 17 ++++++++---------
 1 file changed, 8 insertions(+), 9 deletions(-)

diff --git a/hosts/pinwheel/modules/openvpn/default.nix b/hosts/pinwheel/modules/openvpn/default.nix
index 4522c2e..8288f27 100644
--- a/hosts/pinwheel/modules/openvpn/default.nix
+++ b/hosts/pinwheel/modules/openvpn/default.nix
@@ -23,15 +23,14 @@ in
 
     services.resolved = {
       enable = true;
-      dnssec = "false";
-      domains = [ "~." ];
-      fallbackDns = [
-        "1.1.1.1#one.one.one.one"
-        "1.0.0.1#one.one.one.one"
-      ];
-      extraConfig = ''
-        DNSOverTLS=yes
-      '';
+      settings = {
+        Resolve = {
+          Domains = [ "~." ];
+          DNSSEC = false;
+          DNSOverTLS = true;
+        };
+      };
+
     };
   };
 }