diff options
Diffstat (limited to 'nixos/modules/system/network/default.nix')
| -rw-r--r-- | nixos/modules/system/network/default.nix | 25 |
1 files changed, 16 insertions, 9 deletions
diff --git a/nixos/modules/system/network/default.nix b/nixos/modules/system/network/default.nix index a862235..5601ff8 100644 --- a/nixos/modules/system/network/default.nix +++ b/nixos/modules/system/network/default.nix @@ -5,22 +5,29 @@ networking.networkmanager.enable = true; programs.amnezia-vpn.enable = true; - # Primary DNS via Mullvad DoT (Base mode) + # Primary DNS via Mullvad DoT (Base mode). + # When systemd-resolved is enabled, these servers are fed into its + # `Resolve.DNS` list. The `#server` suffix is systemd-resolved's + # DoT (DNS-over-TLS) syntax and is ignored by non-resolved consumers. networking.nameservers = [ "194.242.2.4#base.dns.mullvad.net" "194.242.2.2#dns.mullvad.net" ]; - # systemd-resolved: Mullvad primary, Quad9 fallback + # systemd-resolved: Mullvad primary, Quad9 fallback. + # Options live under `settings.Resolve` (the flat `services.resolved.*` + # aliases were removed upstream — they now emit deprecation warnings). services.resolved = { enable = true; - dnsovertls = "opportunistic"; - dnssec = "false"; - domains = [ "~." ]; - fallbackDns = [ - "9.9.9.9#dns.quad9.net" - "149.112.112.112#dns.quad9.net" - ]; + settings.Resolve = { + DNSOverTLS = "opportunistic"; + DNSSEC = "false"; + Domains = [ "~." ]; + FallbackDNS = [ + "9.9.9.9#dns.quad9.net" + "149.112.112.112#dns.quad9.net" + ]; + }; }; # Avahi (Printer / Network Discovery) |