steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

sj-vps-htz0,containers/dns: remove IPv6, opportunistic TLS

Browse source
This commit is contained in:
steveej 2023-11-25 09:19:31 +01:00
parent d86fdd61c9
commit f5882396e3
3 changed files with 26 additions and 24 deletions
Download patch file Download diff file Expand all files Collapse all files

13
nix/os/profiles/containers/configuration.nix
View file

@ -1,19 +1,8 @@
{...}: {
networking.useHostResolvConf = false;
networking.nameservers = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
services.resolved = {
enable = true;
dnssec = "true";
domains = ["~."];
fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
extraConfig = ''
DNSOverTLS=yes
'';
};
imports = [
../../snippets/systemd-resolved.nix
# ../../modules/ddclient-ovh.nix
# ../../modules/ddclient-hetzner.nix
];