From f3db446c02e1e54415f0b8f2dd662f384dadea1e Mon Sep 17 00:00:00 2001
From: sinanmohd <sinan@sinanmohd.com>
Date: Wed, 25 Mar 2026 16:54:03 +0530
Subject: feat(common/dns): use resolvd,
 https://tailscale.com/blog/sisyphean-dns-client-linux

---
 os/common/configuration.nix | 13 ++++++++++---
 os/pc/modules/network.nix   |  6 +-----
 2 files changed, 11 insertions(+), 8 deletions(-)

(limited to 'os')

diff --git a/os/common/configuration.nix b/os/common/configuration.nix
index 865c926..f4f3093 100644
--- a/os/common/configuration.nix
+++ b/os/common/configuration.nix
@@ -73,8 +73,15 @@ in
     ];
 
   programs.mosh.enable = true;
-  services.openssh = {
-    enable = true;
-    settings.PasswordAuthentication = false;
+  services = {
+    resolved = {
+      enable = true;
+      dnssec = "allow-downgrade";
+      dnsovertls = "opportunistic";
+    };
+    openssh = {
+      enable = true;
+      settings.PasswordAuthentication = false;
+    };
   };
 }
diff --git a/os/pc/modules/network.nix b/os/pc/modules/network.nix
index 029822f..eeb5b0e 100644
--- a/os/pc/modules/network.nix
+++ b/os/pc/modules/network.nix
@@ -2,10 +2,6 @@
 {
   networking.wireless.iwd = {
     enable = true;
-
-    settings = {
-      General.EnableNetworkConfiguration = true;
-      Network.NameResolvingService = "resolvconf";
-    };
+    settings.General.EnableNetworkConfiguration = true;
   };
 }
-- 
cgit v1.2.3