shell-things/etc/systemd/resolved.conf.d/quad9-strict.conf

# Quad9 / systemd-resolved. For people who don't panic when DNSSEC or
# DoT doesn't work and captive portals attack? See README.md
[Resolve]
DNS=2620:fe::9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 9.9.9.9#dns.quad9.net
Domains=~.
DNSSEC=true
DNSOverTLS=true
Cache=true
etc/systemd-resolved: rework all files more or less * explain things in README.md, don't duplicate comments * opportunistic-insecure.conf should be used everywhere by default, so thus it's now everywhere.conf. However I am yet to test it does what I expect, so this is bad case of testing in production or after committing it in general. 2020-07-04 18:06:18 +02:00			`# Quad9 / systemd-resolved. For people who don't panic when DNSSEC or`
			`# DoT doesn't work and captive portals attack? See README.md`
			`[Resolve]`
			`DNS=2620:fe::9#dns.quad9.net 149.112.112.112#dns.quad9.net 2620:fe::fe#dns.quad9.net 9.9.9.9#dns.quad9.net`
			`Domains=~.`
			`DNSSEC=true`
			`DNSOverTLS=true`
			`Cache=true`