From c13077f287b2283b420c5c0d1cc0669f3e7aa264 Mon Sep 17 00:00:00 2001
From: Filippo Berto <berto.f@protonmail.com>
Date: Mon, 23 Jun 2025 10:21:06 +0200
Subject: [PATCH] Add resolved configuration for DNS

---
 modules/nixos/basics/default.nix  |  1 +
 modules/nixos/basics/resolved.nix | 11 +++++++++++
 2 files changed, 12 insertions(+)
 create mode 100644 modules/nixos/basics/resolved.nix

diff --git a/modules/nixos/basics/default.nix b/modules/nixos/basics/default.nix
index 383018d..553880a 100644
--- a/modules/nixos/basics/default.nix
+++ b/modules/nixos/basics/default.nix
@@ -7,6 +7,7 @@
     ./fstrim.nix
     ./fwupd.nix
     ./remote-deploy.nix
+    ./resolved.nix
     ./tailscale.nix
     ./zerotier.nix
   ];
diff --git a/modules/nixos/basics/resolved.nix b/modules/nixos/basics/resolved.nix
new file mode 100644
index 0000000..a11fe38
--- /dev/null
+++ b/modules/nixos/basics/resolved.nix
@@ -0,0 +1,11 @@
+{
+  services.resolved = {
+    enable = true;
+    dnssec = "true";
+    # dnsovertls = "true";
+    fallbackDns = [
+      "1.1.1.1"
+      "8.8.8.8"
+    ];
+  };
+}