aviallon/nixos-lib
1
0
Fork 0
mirror of https://github.com/aviallon/nixos-lib.git synced 2026-04-05 17:27:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[Network/DNS] Disable DNSSEC

Browse source
This commit is contained in:
Antoine Viallon 2022-04-27 23:03:00 +02:00
parent 94a5259b68
commit 6b5f69bece
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
network.nix
View file

@ -34,6 +34,7 @@ in
services.resolved.enable = (cfg.dns == "systemd-resolved");
services.resolved.llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
services.resolved.dnssec = "false"; # Causes issues with masquerading DNS
services.unbound.enable = (cfg.dns == "unbound");