harald/nixcfg
1
0
Fork 0
Code Issues Pull requests Packages Projects Releases Wiki Activity

refactor: comment out resolved DNS customization

Browse source 
Commented out DNSSEC configuration and single-label resolution in systemd-resolved. This change disables custom DNS behavior to potentially align with default system behavior or compatibility requirements.
This commit is contained in:
Harald Hoyer 2025-02-25 08:42:16 +01:00
parent 109c6be0b1
commit fff88913be
4 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
systems/aarch64-linux/m4nix/default.nix
View file

@ -55,7 +55,7 @@ with lib.metacfg;
services.ratbagd.enable = true;
services.resolved.enable = true;
services.resolved.dnssec = "allow-downgrade";
#services.resolved.dnssec = "allow-downgrade";
services.resolved.extraConfig = ''
ResolveUnicastSingleLabel=yes
'';

2
systems/x86_64-linux/sgx/network.nix
View file

@ -6,7 +6,7 @@
}:
{
services.resolved.enable = true;
services.resolved.dnssec = "allow-downgrade";
#services.resolved.dnssec = "allow-downgrade";
services.resolved.extraConfig = ''
ResolveUnicastSingleLabel=yes
'';

2
systems/x86_64-linux/t15/default.nix
View file

@ -28,7 +28,7 @@
system.stateVersion = "23.11";
services.resolved.enable = true;
services.resolved.dnssec = "allow-downgrade";
#services.resolved.dnssec = "allow-downgrade";
sops.age.sshKeyPaths = [ "/persist/ssh/ssh_host_ed25519_key" ];
sops.secrets.backup-s3.sopsFile = ../../../.secrets/t15/backup-s3.yaml;

8
systems/x86_64-linux/x1/default.nix
View file

@ -51,10 +51,10 @@ with lib.metacfg;
services.ratbagd.enable = true;
services.resolved.enable = true;
services.resolved.dnssec = "allow-downgrade";
services.resolved.extraConfig = ''
ResolveUnicastSingleLabel=yes
'';
#services.resolved.dnssec = "allow-downgrade";
#services.resolved.extraConfig = ''
# ResolveUnicastSingleLabel=yes
#'';
systemd.packages = [ pkgs.cloudflare-warp ]; # for warp-cli