From aab3016621265f3609c314950dbfa564c8d96ad5 Mon Sep 17 00:00:00 2001
From: "Casper V. Kristensen" <EMAIL>
Date: Fri, 11 Aug 2023 17:45:48 +0200
Subject: [PATCH] DoT

---
 modules/base/network.nix | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/base/network.nix b/modules/base/network.nix
index cae0c8c..5aa9e4e 100644
--- a/modules/base/network.nix
+++ b/modules/base/network.nix
@@ -4,7 +4,7 @@
       allowedTCPPorts = [ 1234 1337 8000 8080 ];
       allowedUDPPorts = [ 1234 1337 8000 8080 ];
     };
-    nameservers = [ "159.69.4.2#dns.caspervk.net" ];
+    nameservers = [ "127.0.0.53" ];  # resolved stub resolver
     networkmanager = {
       enable = true;
       dns = lib.mkForce "none";
@@ -14,9 +14,9 @@
   services.resolved = {
     enable = true;
     dnssec = "true";
-    fallbackDns = [ "159.69.4.2#dns.caspervk.net" ];
+    fallbackDns = [ "159.69.4.2#dns.caspervk.net" "2a01:4f8:1c0c:70d1::1#dns.caspervk.net" ];
     extraConfig = ''
-      DNS=159.69.4.2#dns.caspervk.net
+      DNS=159.69.4.2#dns.caspervk.net 2a01:4f8:1c0c:70d1::1#dns.caspervk.net
       DNSOverTLS=yes
     '';
   };