Minimize pkgs use, add stable channel for unstable systems, more separation and such
This commit is contained in:
parent
e2c86171a5
commit
9190e09c93
23 changed files with 112 additions and 93 deletions
|
@ -8,16 +8,17 @@
|
|||
nftables.enable = true;
|
||||
firewall.allowPing = false;
|
||||
nameservers = [
|
||||
"1.1.1.1#one.one.one.one"
|
||||
"1.0.0.1#one.one.one.one"
|
||||
"9.9.9.11#dns11.quad9.net"
|
||||
"149.112.112.11#dns11.quad9.net"
|
||||
"2620:fe::11#dns11.quad9.net"
|
||||
"2620:fe::fe:11#dns11.quad9.net"
|
||||
];
|
||||
};
|
||||
|
||||
services.resolved = {
|
||||
enable = true;
|
||||
dnssec = "true";
|
||||
domains = [ "~." ];
|
||||
fallbackDns = config.networking.nameservers;
|
||||
dnsovertls = "true";
|
||||
fallbackDns = config.networking.nameservers;
|
||||
};
|
||||
}
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue