s0me1newithhand7s/reNixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

kyra(hardening): resolved is now using hickory selfhosted

Browse source 
Signed-off-by: s0me1newithhand7s <git+me@hand7s.org>
This commit is contained in:
s0me1newithhand7s 2026-05-03 16:00:06 +03:00
parent d5917b3304
commit 4d6c618cbc
1 changed files with 29 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

57
kyra/services/resolved.nix
View file

@ -2,38 +2,39 @@ _: {
services = { services = {
resolved = { resolved = {
enable = true; enable = true;
dnsovertls = toString true; settings = {
dnssec = toString true; Resolve = {
llmnr = toString true; DNSOverTLS = true;
domains = [ DNSSEC = true;
"~." Domains = [
]; "~."
];
fallbackDns = [ DNS = [
# cf dns # hand7s dns
"1.1.1.1" "127.0.0.1#dns.hand7s.org"
"1.0.0.1" "::1#dns.hand7s.org"
"2606:4700:4700::1111"
"2606:4700:4700::1001"
# google dns # cf dns
"8.8.8.8" "1.1.1.1#cloudflare-dns.com"
"8.8.4.4" "1.0.0.1#cloudflare-dns.com"
"2001:4860:4860::8888" "2606:4700:4700::1111#cloudflare-dns.com"
"2001:4860:4860::8844" "2606:4700:4700::1001#cloudflare-dns.com"
# q9 dns # google dns
"9.9.9.9" "8.8.8.8#dns.google"
"149.112.112.112" "8.8.4.4#dns.google"
"2620:fe::fe" "2001:4860:4860::8888#dns.google"
"2620:fe::9" "2001:4860:4860::8844#dns.google"
# open dns # q9 dns
"208.67.222.222" "9.9.9.9#dns.quad9.net"
"208.67.220.220" "149.112.112.112#dns.quad9.net"
"2620:119:35::35" "2620:fe::fe#dns.quad9.net"
"2620:119:53::53" "2620:fe::9#dns.quad9.net"
]; ];
};
};
}; };
}; };
} }