From 4a5788ef8a8ebc4355e5306f3b33af0d17add254 Mon Sep 17 00:00:00 2001
From: Crony Akatsuki <crony@cronyakatsuki.xyz>
Date: Fri, 26 Sep 2025 01:59:46 +0200
Subject: [PATCH] feat(ymir): use dns over https.

---
 hosts/ymir/configuration.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/hosts/ymir/configuration.nix b/hosts/ymir/configuration.nix
index 7d50bd3..dd35f81 100644
--- a/hosts/ymir/configuration.nix
+++ b/hosts/ymir/configuration.nix
@@ -44,10 +44,13 @@
 
   # Enable networking
   networking.networkmanager.enable = true;
-  networking.nameservers = ["192.168.0.10" "1.1.1.1"];
+  networking.nameservers = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
   services.resolved = {
     enable = true;
-    fallbackDns = ["192.168.0.10" "1.1.1.1"];
+    fallbackDns = ["1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one"];
+    dnssec = "true";
+    dnsovertls = "true";
+    domains = ["~."];
   };
 
   # Set your time zone.