modules/system/networking/resolved.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

{ secrets, ... }:
{
  services.resolved = {
    enable = false;
    dnssec = "true";
    domains = [ "~." ];
    dnsovertls = "true";
    llmnr = "false";

    extraConfig = ''
      DNS=45.90.28.0#${secrets.nextdns_id}.dns.nextdns.io
      DNS=2a07:a8c0::#${secrets.nextdns_id}.dns.nextdns.io
      DNS=45.90.30.0#${secrets.nextdns_id}.dns.nextdns.io
      DNS=2a07:a8c1::#${secrets.nextdns_id}.dns.nextdns.io
    '';
  };
}