diff options
| author | schererleander <leander@schererleander.de> | 2026-02-05 12:03:07 +0100 |
|---|---|---|
| committer | schererleander <leander@schererleander.de> | 2026-02-05 15:19:41 +0100 |
| commit | 3b13d9a2a367db84d48940460532c17a374bb488 (patch) | |
| tree | 599110a39c4baecf3991fe9a58d0103a43c38896 /modules/nixos/dns | |
| parent | 46aa4842b98d9215baca00060c233f386a0c2188 (diff) | |
feat(modules): use dendritic pattern
Diffstat (limited to 'modules/nixos/dns')
| -rw-r--r-- | modules/nixos/dns/default.nix | 56 |
1 files changed, 0 insertions, 56 deletions
diff --git a/modules/nixos/dns/default.nix b/modules/nixos/dns/default.nix deleted file mode 100644 index 0cc1766..0000000 --- a/modules/nixos/dns/default.nix +++ /dev/null @@ -1,56 +0,0 @@ -{ config, lib, ... }: -let - inherit (lib) - mkEnableOption - mkOption - types - mkIf - concatStringsSep - ; - cfg = config.nx.dns; -in -{ - options.nx.dns = { - enable = mkEnableOption "DNS-over-TLS via systemd-resolved"; - servers = mkOption { - type = types.listOf types.str; - default = [ - "1.1.1.1#cloudflare-dns.com" - "1.0.0.1#cloudflare-dns.com" - "9.9.9.9#dns.quad9.net" - "149.112.112.112#dns.quad9.net" - ]; - }; - fallbackServers = mkOption { - type = types.listOf types.str; - default = [ - "8.8.8.8#dns.google" - "8.8.4.4#dns.google" - ]; - }; - }; - - config = mkIf cfg.enable { - services.resolved = { - enable = true; - settings = { - Resolve = { - DNS = cfg.servers; - FallbackDNS = cfg.fallbackServers; - DNSSEC = true; - DNSOverTLS = true; - Domains = [ "~." ]; - }; - }; - }; - networking = { - nameservers = cfg.servers; - networkmanager.dns = lib.mkDefault "systemd-resolved"; - }; - systemd.services.systemd-resolved.environment = { - DNS = concatStringsSep " " cfg.servers; - FallbackDNS = concatStringsSep " " cfg.fallbackServers; - }; - }; - -} |
