dnssec

modules/nixos/base.nix

@@ -6,7 +6,10 @@
   ...
 }:
 {
-  imports = [ nixosModules.packages.common ];
+  imports = [
+    nixosModules.packages.common
+    nixosModules.dnsResolved
+  ];
 
   nixpkgs.config.allowUnfree = true;
 
@@ -65,6 +68,7 @@
   systemd.network.wait-online.enable = false;
   services.resolved.enable = true;
   services.openssh.enable = true;
+  my.dns.enable = true;
 
   systemd.network.networks."10-wired" = {
     matchConfig.Name = [
@@ -75,8 +79,14 @@
       DHCP = "yes";
       IPv6AcceptRA = true;
     };
-    dhcpV4Config.RouteMetric = 100;
-    ipv6AcceptRAConfig.RouteMetric = 100;
+    dhcpV4Config = {
+      RouteMetric = 100;
+      UseDNS = false;
+    };
+    ipv6AcceptRAConfig = {
+      RouteMetric = 100;
+      UseDNS = false;
+    };
   };
 
   programs.zsh.enable = true;