From 12160d46894c26d9b7a0c8ba055f2ce9320c5d70 Mon Sep 17 00:00:00 2001
From: muon <admin@muon.host>
Date: Sat, 2 Aug 2025 20:51:15 +0000
Subject: [PATCH] Update DNS

---
 modules/nixos/core/network.nix | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/modules/nixos/core/network.nix b/modules/nixos/core/network.nix
index daa6477..5bd2ff8 100644
--- a/modules/nixos/core/network.nix
+++ b/modules/nixos/core/network.nix
@@ -27,8 +27,15 @@ in with lib; {
 
   config = {
     networking.networkmanager.enable = true;
-    networking.nameservers = [ "45.90.28.97" "45.90.30.97" ];
-    # services.resolved.enable = true;
+    # networking.nameservers = [ "45.90.28.97" "45.90.30.97" ];
+    networking.nameservers = [ "194.242.2.4#base.dns.mullvad.net" ];
+    services.resolved = {
+      enable = true;
+      dnssec = "false";
+      dnsovertls = "true";
+      domains = [ "~." ];
+      fallbackDns = [ "194.242.2.4#base.dns.mullvad.net" ];
+    };
 
     # udev 250 doesn't reliably reinitialize devices after restart
     systemd.services.systemd-udevd.restartIfChanged = false;