ooks/ooknet
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor(networking): split networking into modules

Browse source
This commit is contained in:
ooks-io 2024-04-09 20:52:14 +12:00
parent 4a177d2122
commit 221d9e3e33
8 changed files with 227 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

21
system/modules/networking/resolved/default.nix Normal file
View file

@ -0,0 +1,21 @@
{ lib, config, ... }:
let
cfg = config.systemModules.networking;
inherit (lib) mkIf mkEnableOption;
in
{
options.systemModules.networking.resolved = mkEnableOption "Enable systemd resolved daemon";
config = mkIf cfg.resolved {
services.resolved = {
enable = true;
fallbackDns = ["9.9.9.9"];
# allow-downgrade is vulnerable to downgrade attacks
extraConfig = ''
DNSOverTLS=yes # or allow-downgrade
'';
};
};
}