reidlab/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

dns

Browse source
This commit is contained in:
Reid 2026-06-09 10:11:09 -07:00
parent cae0bdfc96
commit 674b54e92d
Signed by: reidlab
GPG key ID: DAF5EAF6665839FD
1 changed files with 14 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

14
modules/hardware/networking.nix
View file

@ -20,6 +20,7 @@ in {
wifi.powersave = cfg.powersave;
};
services.resolved.enable = true;
services.resolved.settings.Resolve.DNSSEC = "allow-downgrade";
services.resolved.settings.Resolve.DNSOverTLS = "opportunistic";
@ -27,6 +28,19 @@ in {
networking.wireless.iwd.enable = true;
networking.wireless.iwd.settings.Settings.AutoConnect = true;
# guest wifis are extremely invasive with dns takeover
# lets just bypass that !
networking.nameservers = [
"1.1.1.1#cloudflare-dns.com"
"8.8.8.8#dns.google"
"1.0.0.1#cloudflare-dns.com"
"8.8.4.4#dns.google"
"2606:4700:4700::1111#cloudflare-dns.com"
"2001:4860:4860::8888#dns.google"
"2606:4700:4700::1001#cloudflare-dns.com"
"2001:4860:4860::8844#dns.google"
];
# default startup time is Slowww
systemd.services.NetworkManager-wait-online.enable = false;
};