feat: use systemd-resolved so VPN & WG DNS works

2024-01-24 21:02:10 +01:00 · 2024-01-24 21:02:10 +01:00 · 28786af37b
parent 099fd5a354
commit 28786af37b
1 changed files with 14 additions and 0 deletions
--- a/modules/core/networking.nix
+++ b/modules/core/networking.nix
@ -24,6 +24,20 @@
  networking.firewall.enable = true;
  networking.nftables.enable = true;

+  services.resolved = {
+    enable = true;
+    fallbackDns = [
+      "193.110.81.0#dns0.eu"
+      "2a0f:fc80::#dns0.eu"
+      "185.253.5.0#dns0.eu"
+      "2a0f:fc81::#dns0.eu"
+    ];
+    dnssec = "false";
+    extraConfig = ''
+      DNSOverTLS=opportunistic
+    '';
+  };
+
  # For rage encryption, all hosts need a ssh key pair
  services.openssh = {
    enable = true;