aviallon/nixos-lib
1
0
Fork 0
mirror of https://github.com/aviallon/nixos-lib.git synced 2026-04-05 17:27:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[Network] Force DNS to be Cloudflare

Browse source
This commit is contained in:
Antoine Viallon 2022-06-09 01:18:21 +02:00
parent 9615339fb2
commit c8552eb989
Signed by: aviallon
GPG key ID: 186FC35EDEB25716
1 changed files with 10 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
network.nix
View file

@ -1,4 +1,4 @@
{ config, pkgs, lib, ... }: { config, pkgs, lib, myLib, ... }:
with lib; with lib;
let let
cfg = config.aviallon.network; cfg = config.aviallon.network;
@ -36,6 +36,15 @@ in
enable = (cfg.dns == "systemd-resolved"); enable = (cfg.dns == "systemd-resolved");
llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/ llmnr = mkForce "false"; # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to/
dnssec = "false"; # Causes issues with masquerading DNS dnssec = "false"; # Causes issues with masquerading DNS
extraConfig = myLib.config.toSystemd {
"DNS" = [
# cloudflare-dns.com
"1.1.1.1"
"2606:4700:4700::1111"
"1.0.0.1"
"2606:4700:4700::1001"
];
};
}; };
services.unbound.enable = (cfg.dns == "unbound"); services.unbound.enable = (cfg.dns == "unbound");