2022-03-28 19:28:17 +02:00
|
|
|
[Resolve]
|
2024-04-18 13:28:06 +02:00
|
|
|
# Use this together with other files other than 00-only-unbound.conf!
|
2022-03-28 19:34:34 +02:00
|
|
|
# https://github.com/systemd/systemd/issues/10579 & https://github.com/systemd/systemd/issues/9867
|
2022-03-28 19:28:17 +02:00
|
|
|
#DNSSEC=allow-downgrade
|
2023-10-21 10:27:07 +02:00
|
|
|
# Regardless of the above DNS breaking issues when DNSSEC is
|
|
|
|
|
# enabled/opportunistic, it provides authentication which is important. TLS
|
|
|
|
|
# cannot be fully trusted. https://notes.valdikss.org.ru/jabber.ru-mitm/
|
2024-04-11 09:02:49 +02:00
|
|
|
DNSSEC=true
|
2022-03-28 19:28:17 +02:00
|
|
|
DNSOverTLS=opportunistic
|
2024-04-11 09:02:49 +02:00
|
|
|
Cache=true
|
2024-04-10 10:59:36 +02:00
|
|
|
DNS=127.0.0.1
|
|
|
|
|
DNS=::1
|
2024-04-10 14:06:14 +02:00
|
|
|
Domains=~.
|
2024-04-12 08:52:32 +02:00
|
|
|
# .local domains
|
|
|
|
|
MulticastDNS=true
|
|
|
|
|
# Microsoft Windows compatibility?
|
|
|
|
|
LLMNR=true
|
