From bca5f1353e416e9adb7ecde9c90289c0345fbe82 Mon Sep 17 00:00:00 2001
From: coolneng <akasroua@gmail.com>
Date: Wed, 16 Aug 2023 03:21:25 +0200
Subject: [PATCH] Use DNSSEC for DNS resolution

---
 modules/networking.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/networking.nix b/modules/networking.nix
index 991ba0f..39403ca 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -117,7 +117,8 @@ in {
       cache-size = 10000;
       local-ttl = 300;
 
-      conf-file = "/var/lib/dnsmasq/dnsmasq.blacklist.txt";
+      conf-file = "${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf";
+      dnssec = true;
 
       address = "/coolneng.duckdns.org/192.168.13.2";
     };