teutat3s/os
2
0
Fork 0
forked from pub-solar/os
Code Pull requests Activity

dumpyourvms: switch DNS to NixOS options

Browse source
This commit is contained in:
teutat3s 2025-04-02 14:01:37 +02:00
parent eeffb9744d
commit e53f61cb49
Signed by: teutat3s
GPG key ID: 4FA1D3FA524F22C1
1 changed files with 21 additions and 6 deletions

27
hosts/dumpyourvms/dumpyourvms.nix
View file

@ -56,14 +56,29 @@ in
networking.hostName = "dumpyourvms";
# These nameservers land in resolved.conf as 'DNS=<list>'
networking.nameservers = [
"9.9.9.9#dns.quad9.net"
"149.112.112.112#dns.quad9.net"
"2620:fe::fe#dns.quad9.net"
"2620:fe::9#dns.quad9.net"
];
services.resolved = {
enable = true;
extraConfig = ''
DNS=5.1.66.255#dot.ffmuc.net 185.150.99.255#dot.ffmuc.net 5.9.164.112#dns3.digitalcourage.de 89.233.43.71#unicast.censurfridns.dk 185.49.141.37#getdnsapi.net 2001:678:e68:f000::#dot.ffmuc.net 2001:678:ed0:f000::#dot.ffmuc.net 2a01:4f8:251:554::2#dns3.digitalcourage.de 2a01:3a0:53:53::0#unicast.censurfridns.dk 2a04:b900:0:100::38#getdnsapi.net
FallbackDNS=9.9.9.9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 2620:fe::9#dns.quad9.net
Domains=~.
DNSOverTLS=yes
'';
dnsovertls = "true";
# default value in nixos module
dnssec = "false";
domains = [
"~."
];
fallbackDns = [
"5.1.66.255#dot.ffmuc.net"
"185.150.99.255#dot.ffmuc.net"
"185.71.138.138#wikimedia-dns.org"
"2001:678:e68:f000::#dot.ffmuc.net"
"2001:678:ed0:f000::#dot.ffmuc.net"
"2001:67c:930::1#wikimedia-dns.org"
];
};
services.tailscale = {
enable = true;