core/unbound: magic dns

lovesegfault · Dec 16, 2020 · 4c6d2d0 · 4c6d2d0
1 parent d2d5802
commit 4c6d2d0
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/core/unbound.nix b/core/unbound.nix
@@ -1,11 +1,15 @@
 { lib, ... }: {
   networking.networkmanager.dns = "unbound";
+  networking.search = [ "meurer.org.beta.tailscale.net" ];
+  networking.resolvconf.extraConfig = ''
+    search_domains='meurer.org.beta.tailscale.net'
+  '';
 
   services.resolved.enable = lib.mkForce false;
   services.unbound = {
     enable = true;
-    enableRootTrustAnchor = true;
-    forwardAddresses = [ "1.1.1.1" "2606:4700:4700::1111" "8.8.8.8" "2001:4860:4860::8844" ];
+    enableRootTrustAnchor = false;
+    forwardAddresses = [ "100.100.100.100" ];
     extraConfig = ''
       # This is part of the server clause
       infra-cache-slabs: 16