feat(network): enable systemd-resolved with custom settings

- Enable systemd-resolved and configure DNSSEC with downgrade option.
- Add extra configuration to allow resolving unicast single-label names.
This improves DNS handling and ensures compatibility for SGX setup.
This commit is contained in:
Harald Hoyer 2025-02-22 08:23:38 +01:00
parent a753a2fbba
commit 1235ec9071

View file

@ -5,6 +5,12 @@
...
}:
{
services.resolved.enable = true;
services.resolved.dnssec = "allow-downgrade";
services.resolved.extraConfig = ''
ResolveUnicastSingleLabel=yes
'';
networking.hostName = "sgx"; # Define your hostname.
networking.useDHCP = false;