From d5ec7b775888827089a668aea58244b2ad4a1e70 Mon Sep 17 00:00:00 2001
From: Karel Kočí <cynerd@email.cz>
Date: Tue, 31 Mar 2026 17:46:42 +0200
Subject: treewide: long time changes

---
 nixos/modules/router.nix | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

(limited to 'nixos/modules/router.nix')

diff --git a/nixos/modules/router.nix b/nixos/modules/router.nix
index 01110ae..1c8f4cc 100644
--- a/nixos/modules/router.nix
+++ b/nixos/modules/router.nix
@@ -178,12 +178,11 @@ in {
 
     services.resolved = {
       enable = true;
-      #dnssec = "true";
-      fallbackDns = ["1.1.1.1" "8.8.8.8"];
-      extraConfig = ''
-        DNSStubListenerExtra=${cnf.lanIP}
-        DNSStubListenerExtra=192.168.1.1
-      '';
+      settings.Resolve = {
+        FallbackDNS = ["1.1.1.1" "8.8.8.8"];
+        DNSStubListenerExtra=[cnf.lanIP "192.168.1.1"];
+        # TODO possibly enforce DNSSEC again
+      };
     };
   };
 }
-- 
cgit v1.3