From f52db4524f8271c037b42242d689f73e8f96334c Mon Sep 17 00:00:00 2001
From: Filippo Berto <berto.f@protonmail.com>
Date: Mon, 23 Jun 2025 12:05:58 +0200
Subject: [PATCH] Resolved: allow downgrade

---
 modules/nixos/basics/resolved.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/nixos/basics/resolved.nix b/modules/nixos/basics/resolved.nix
index 2f06ff2..a4c2ea2 100644
--- a/modules/nixos/basics/resolved.nix
+++ b/modules/nixos/basics/resolved.nix
@@ -1,7 +1,7 @@
 {
   services.resolved = {
     enable = true;
-    dnssec = "true";
+    dnssec = "allow-downgrade";
     # dnsovertls = "true";
     fallbackDns = [
       # CLOUDFLARE