aboutsummaryrefslogtreecommitdiff
path: root/modules/nixos/dns
diff options
context:
space:
mode:
authorschererleander <leander@schererleander.de>2026-02-05 12:03:07 +0100
committerschererleander <leander@schererleander.de>2026-02-05 15:19:41 +0100
commit3b13d9a2a367db84d48940460532c17a374bb488 (patch)
tree599110a39c4baecf3991fe9a58d0103a43c38896 /modules/nixos/dns
parent46aa4842b98d9215baca00060c233f386a0c2188 (diff)
feat(modules): use dendritic pattern
Diffstat (limited to 'modules/nixos/dns')
-rw-r--r--modules/nixos/dns/default.nix56
1 files changed, 0 insertions, 56 deletions
diff --git a/modules/nixos/dns/default.nix b/modules/nixos/dns/default.nix
deleted file mode 100644
index 0cc1766..0000000
--- a/modules/nixos/dns/default.nix
+++ /dev/null
@@ -1,56 +0,0 @@
-{ config, lib, ... }:
-let
- inherit (lib)
- mkEnableOption
- mkOption
- types
- mkIf
- concatStringsSep
- ;
- cfg = config.nx.dns;
-in
-{
- options.nx.dns = {
- enable = mkEnableOption "DNS-over-TLS via systemd-resolved";
- servers = mkOption {
- type = types.listOf types.str;
- default = [
- "1.1.1.1#cloudflare-dns.com"
- "1.0.0.1#cloudflare-dns.com"
- "9.9.9.9#dns.quad9.net"
- "149.112.112.112#dns.quad9.net"
- ];
- };
- fallbackServers = mkOption {
- type = types.listOf types.str;
- default = [
- "8.8.8.8#dns.google"
- "8.8.4.4#dns.google"
- ];
- };
- };
-
- config = mkIf cfg.enable {
- services.resolved = {
- enable = true;
- settings = {
- Resolve = {
- DNS = cfg.servers;
- FallbackDNS = cfg.fallbackServers;
- DNSSEC = true;
- DNSOverTLS = true;
- Domains = [ "~." ];
- };
- };
- };
- networking = {
- nameservers = cfg.servers;
- networkmanager.dns = lib.mkDefault "systemd-resolved";
- };
- systemd.services.systemd-resolved.environment = {
- DNS = concatStringsSep " " cfg.servers;
- FallbackDNS = concatStringsSep " " cfg.fallbackServers;
- };
- };
-
-}