From ab079b9766eb891bd1c77990f315cb711fba628f Mon Sep 17 00:00:00 2001
From: Kat Inskip <kat@inskip.me>
Date: Sun, 12 Nov 2023 08:07:11 -0800
Subject: [PATCH] DNS fix

---
 nixos/roles/graphical/dns.nix | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/nixos/roles/graphical/dns.nix b/nixos/roles/graphical/dns.nix
index 17d27271..276630ea 100644
--- a/nixos/roles/graphical/dns.nix
+++ b/nixos/roles/graphical/dns.nix
@@ -1,15 +1,19 @@
-_: {
+{lib, ...}: let
+  inherit (lib.modules) mkForce;
+in {
   networking = {
+    networkmanager.dns = mkForce "none";
     nameservers = [
-      "194.242.2.2" # For now, Mullvad DNS.
+      "9.9.9.9"
     ];
   };
   services.resolved = {
     enable = true;
     fallbackDns = [
-      "1.1.1.1"
+      "9.9.9.9"
     ];
-    dnssec = "false";
+    domains = ["~."];
+    dnssec = "true";
     extraConfig = ''
       DNSOverTLS=yes
     '';