modules/xnet/net/dns.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

{ lib, ... }:
let
  inherit (lib)
    mkDefault
    ;

  quad9 = [
    "9.9.9.9#dns.quad9.net"
    "149.112.112.112#dns.quad9.net"
    "2620:fe::fe#dns.quad9.net"
    "2620:fe::9#dns.quad9.net"
  ];

  cloudflare = [
    "1.1.1.1#one.one.one.one"
    "1.0.0.1#one.one.one.one"
    "2606:4700:4700::1111#one.one.one.one"
    "2606:4700:4700::1001#one.one.one.one"
  ];
in
{

  networking.nameservers = mkDefault quad9;

  services.resolved = {
    enable = true;
    llmnr = "false";
    dnssec = "false";
    dnsovertls = mkDefault "opportunistic";
    fallbackDns = quad9 ++ cloudflare;
    extraConfig = ''
      MulticastDNS=yes
    '';
  };

  # Allow mDNS resolution
  networking.firewall.allowedTCPPorts = [ 5353 ];
}