From 91e02014a08c68057caaa002d3fa248ffac2b8c9 Mon Sep 17 00:00:00 2001
From: Adithya Nair <adtya@adtya.xyz>
Date: Wed, 22 Nov 2023 12:23:52 +0530
Subject: [PATCH] reconfigure dns

---
 hosts/skipper/network.nix | 18 +++++++++++++++++-
 1 file changed, 17 insertions(+), 1 deletion(-)

diff --git a/hosts/skipper/network.nix b/hosts/skipper/network.nix
index 0947805..f11c212 100644
--- a/hosts/skipper/network.nix
+++ b/hosts/skipper/network.nix
@@ -3,6 +3,13 @@
   networking = {
     hostName = "Skipper";
 
+    extraHosts = ''
+      10.8.1.1 proxy
+      10.8.1.2 skipper
+      10.8.1.3 rico1
+      10.8.1.4 rico2
+    '';
+
     networkmanager = {
       enable = true;
       dns = "systemd-resolved";
@@ -28,5 +35,14 @@
     };
   };
 
-  services.resolved.enable = true;
+  services.resolved = {
+    enable = true;
+    dnssec = "allow-downgrade";
+    extraConfig = ''
+      [Resolve]
+      DNS=9.9.9.11#dns11.quad9.net 2620:fe::11#dns11.quad9.net 149.112.112.11#dns11.quad9.net 2620:fe::fe:11#dns11.quad9.net
+      DNSOverTLS=yes
+      Domains=~.
+    '';
+  };
 }