From 6b5f69beceef6ffd5206be523c567fb1cd59a6b0 Mon Sep 17 00:00:00 2001
From: Antoine Viallon <antoine@lesviallon.fr>
Date: Wed, 27 Apr 2022 23:03:00 +0200
Subject: [PATCH] [Network/DNS] Disable DNSSEC

---
 network.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/network.nix b/network.nix
index 42707b8..428c0ad 100644
--- a/network.nix
+++ b/network.nix
@@ -34,6 +34,7 @@ in
 
     services.resolved.enable = (cfg.dns == "systemd-resolved");
     services.resolved.llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
+    services.resolved.dnssec = "false"; # Causes issues with masquerading DNS
 
     services.unbound.enable = (cfg.dns == "unbound");