From b84cc156236ecd4fbe0c9d458e46078df625cb47 Mon Sep 17 00:00:00 2001
From: Fuwn <contact@fuwn.me>
Date: Wed, 11 Sep 2024 03:34:29 -0700
Subject: Bump: move networking module

---
 modules/networking/resolved.nix | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)
 create mode 100644 modules/networking/resolved.nix

(limited to 'modules/networking/resolved.nix')

diff --git a/modules/networking/resolved.nix b/modules/networking/resolved.nix
new file mode 100644
index 0000000..82effbe
--- /dev/null
+++ b/modules/networking/resolved.nix
@@ -0,0 +1,17 @@
+{ secrets, ... }:
+{
+  services.resolved = {
+    enable = false;
+    dnssec = "true";
+    domains = [ "~." ];
+    dnsovertls = "true";
+    llmnr = "false";
+
+    extraConfig = ''
+      DNS=45.90.28.0#${secrets.nextdns_id}.dns.nextdns.io
+      DNS=2a07:a8c0::#${secrets.nextdns_id}.dns.nextdns.io
+      DNS=45.90.30.0#${secrets.nextdns_id}.dns.nextdns.io
+      DNS=2a07:a8c1::#${secrets.nextdns_id}.dns.nextdns.io
+    '';
+  };
+}
-- 
cgit v1.2.3