From 2b02afa137c7512314cf45ec5e6c1ce01bf8d035 Mon Sep 17 00:00:00 2001
From: Jake Ginesin <jakeginesin@gmail.com>
Date: Fri, 27 Jun 2025 22:13:38 -0400
Subject: [PATCH] 441 current  2025-06-27 22:12:56  25.05.20250424.f771eb4    
 6.12.24                          *

---
 home/scripts/security/subs2.txt      |  3 ---
 system/services/resolved/default.nix | 15 +++++++++++++++
 system/services/services.nix         |  1 +
 3 files changed, 16 insertions(+), 3 deletions(-)
 delete mode 100644 home/scripts/security/subs2.txt
 create mode 100644 system/services/resolved/default.nix

diff --git a/home/scripts/security/subs2.txt b/home/scripts/security/subs2.txt
deleted file mode 100644
index adf66ae..0000000
--- a/home/scripts/security/subs2.txt
+++ /dev/null
@@ -1,3 +0,0 @@
-jakegines.in
-joselyn.ns.cloudflare.com
-roman.ns.cloudflare.com
diff --git a/system/services/resolved/default.nix b/system/services/resolved/default.nix
new file mode 100644
index 0000000..978a2fe
--- /dev/null
+++ b/system/services/resolved/default.nix
@@ -0,0 +1,15 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  networking.nameservers = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
+
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = ["~."];
+    fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
+    dnsovertls = "true";
+  };
+}
diff --git a/system/services/services.nix b/system/services/services.nix
index f99bb41..d90b107 100644
--- a/system/services/services.nix
+++ b/system/services/services.nix
@@ -7,5 +7,6 @@
     ./synaptics/default.nix
     ./tailscale/default.nix
     ./syncthing/default.nix
+    ./resolved/default.nix
   ];
 }