feat(common/dns): use resolvd, https://tailscale.com/blog/sisyphean-dns-client-linuxHEADmaster

1 files changed, 10 insertions, 3 deletions

diff --git a/os/common/configuration.nix b/os/common/configuration.nix
index 865c926..f4f3093 100644
--- a/os/common/configuration.nix
+++ b/os/common/configuration.nix
@@ -73,8 +73,15 @@ in
     ];
 
   programs.mosh.enable = true;
-  services.openssh = {
-    enable = true;
-    settings.PasswordAuthentication = false;
+  services = {
+    resolved = {
+      enable = true;
+      dnssec = "allow-downgrade";
+      dnsovertls = "opportunistic";
+    };
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+    };
   };
 }