441 current 2025-06-27 22:12:56 25.05.20250424.f771eb4 6.12.24 *

system/services/resolved/default.nix

@@ -0,0 +1,15 @@
+{
+  config,
+  pkgs,
+  ...
+}: {
+  networking.nameservers = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
+
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    domains = ["~."];
+    fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
+    dnsovertls = "true";
+  };
+}

system/services/services.nix

@@ -7,5 +7,6 @@
     ./synaptics/default.nix
     ./tailscale/default.nix
     ./syncthing/default.nix
+    ./resolved/default.nix
   ];
 }