1 files changed, 5 insertions, 6 deletions
diff --git a/nixos/modules/router.nix b/nixos/modules/router.nix
index 224037b..1c8f4cc 100644
--- a/nixos/modules/router.nix
+++ b/nixos/modules/router.nix
@@ -178,12 +178,11 @@ in {
 
     services.resolved = {
       enable = true;
-      dnssec = "true";
-      fallbackDns = ["1.1.1.1" "8.8.8.8"];
-      extraConfig = ''
-        DNSStubListenerExtra=${cnf.lanIP}
-        DNSStubListenerExtra=192.168.1.1
-      '';
+      settings.Resolve = {
+        FallbackDNS = ["1.1.1.1" "8.8.8.8"];
+        DNSStubListenerExtra=[cnf.lanIP "192.168.1.1"];
+        # TODO possibly enforce DNSSEC again
+      };
     };
   };
 }