From ebc76204072d6ee2bfab742b6399b1bae906c84f Mon Sep 17 00:00:00 2001
From: coolneng <akasroua@gmail.com>
Date: Wed, 16 Aug 2023 03:26:23 +0200
Subject: [PATCH] Enable DNSSEC and mDNS for DNS resolution

---
 modules/networking.nix | 12 +++---------
 1 file changed, 3 insertions(+), 9 deletions(-)

diff --git a/modules/networking.nix b/modules/networking.nix
index 4be85ac..a157dd3 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -25,7 +25,6 @@ in {
   # Disable DNSSEC and enable mDNS
   services.resolved = {
     enable = true;
-    dnssec = "false";
     llmnr = "false";
     extraConfig = ''
       MulticastDNS=yes
@@ -52,10 +51,7 @@ in {
     address = [ "192.168.13.131/24" ];
     gateway = [ "192.168.13.1" ];
     dns = [ "192.168.13.2" ];
-    networkConfig = {
-      DNSSEC = "no";
-      MulticastDNS = "yes";
-    };
+    networkConfig.MulticastDNS = "yes";
   };
 
   systemd.network.networks."25-home" = {
@@ -67,10 +63,7 @@ in {
     address = [ "192.168.13.3/24" ];
     gateway = [ "192.168.13.1" ];
     dns = [ "192.168.13.2" ];
-    networkConfig = {
-      DNSSEC = "no";
-      MulticastDNS = "yes";
-    };
+    networkConfig.MulticastDNS = "yes";
   };
 
   # VPN setup
@@ -100,6 +93,7 @@ in {
       DNS = "10.8.0.1";
       DNSDefaultRoute = true;
       Domains = "~.";
+      MulticastDNS = "yes";
     };
     routingPolicyRules = [{
       routingPolicyRuleConfig = {