From f3db446c02e1e54415f0b8f2dd662f384dadea1e Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Wed, 25 Mar 2026 16:54:03 +0530
Subject: feat(common/dns): use resolvd,
 https://tailscale.com/blog/sisyphean-dns-client-linux

---
 os/common/configuration.nix | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

(limited to 'os/common/configuration.nix')

diff --git a/os/common/configuration.nix b/os/common/configuration.nix
index 865c926..f4f3093 100644
--- a/os/common/configuration.nix
+++ b/os/common/configuration.nix
@@ -73,8 +73,15 @@ in
     ];
 
   programs.mosh.enable = true;
-  services.openssh = {
-    enable = true;
-    settings.PasswordAuthentication = false;
+  services = {
+    resolved = {
+      enable = true;
+      dnssec = "allow-downgrade";
+      dnsovertls = "opportunistic";
+    };
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+    };
   };
 }
-- 
cgit v1.2.3