From 2da909f2f5b6c5a9f5b393a782d6822095f04291 Mon Sep 17 00:00:00 2001
From: Antoine VIALLON <antoine@lesviallon.fr>
Date: Thu, 12 Mar 2026 21:42:59 +0100
Subject: [PATCH] fix(network): update systemd-resolved config to use
 settings-style config

---
 network.nix          | 8 ++++----
 services/general.nix | 7 +++----
 2 files changed, 7 insertions(+), 8 deletions(-)

diff --git a/network.nix b/network.nix
index de5a3e4..1b1c6db 100644
--- a/network.nix
+++ b/network.nix
@@ -35,10 +35,10 @@ in
 
     services.resolved = {
       enable = (cfg.dns == "systemd-resolved");
-      llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
-      dnssec = "false"; # Causes issues with masquerading DNS
-      extraConfig = myLib.config.toSystemd {
-        "DNS" = [
+      settings.Resolve = {
+        LLMNR = mkForce false; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
+        DNSSEC = false;
+        DNS = [
           # cloudflare-dns.com
           "1.1.1.1"
           "2606:4700:4700::1111"
diff --git a/services/general.nix b/services/general.nix
index e1b8b3a..2b39d70 100644
--- a/services/general.nix
+++ b/services/general.nix
@@ -154,10 +154,9 @@ in {
       '';
     };
 
-    services.resolved.extraConfig =
-      ''
-      mDNS=no
-      '';
+    services.resolved.settings.Resolve = {
+      MulticastDNS = false;
+    };
 
 
     services.nginx = {