Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2024-11-22 11:19:22 +01:00
Code Issues Projects Releases Wiki Activity

systemd-resolved: another attempt at local resolvers

Browse Source
This commit is contained in:
Aminda Suomalainen 2024-04-25 13:45:37 +03:00
parent d17ad34650
commit 342e3116a6
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q
2 changed files with 20 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
etc/systemd/resolved.conf.d/00-defaults.conf
View File

@ -4,6 +4,7 @@
# BREAKAGE WARNING for everything else than DNSSEC=false ! # BREAKAGE WARNING for everything else than DNSSEC=false !
# https://github.com/systemd/systemd/issues/10579 & https://github.com/systemd/systemd/issues/9867 # https://github.com/systemd/systemd/issues/10579 & https://github.com/systemd/systemd/issues/9867
# PRIVACY WARNING! systemd-networkd/links may override this. # PRIVACY WARNING! systemd-networkd/links may override this.
# NOTE: Empty variables unset whatever is set before! They are not a mistake.
DNSSEC=true DNSSEC=true
# Take the risk of downgrade attacks. Web browser policies enforce # Take the risk of downgrade attacks. Web browser policies enforce
# DNS-over-HTTPS anyway due to Encrypted Client Hello (ECH) still requiring # DNS-over-HTTPS anyway due to Encrypted Client Hello (ECH) still requiring
@ -11,10 +12,13 @@ DNSSEC=true
#DNSOverTLS=opportunistic #DNSOverTLS=opportunistic
DNSOverTLS=true DNSOverTLS=true
Cache=true Cache=true
# Consider local DNS servers if they exist. Empty should erase previous values. # Consider local DNS servers if they exist.
DNS= DNS=
DNS=127.0.0.1
DNS=::1 DNS=::1
DNS=127.0.0.1
FallbackDNS=
FallbackDNS=::1
FallbackDNS=127.0.0.1
Domains=~. Domains=~.
# .local domains # .local domains
MulticastDNS=true MulticastDNS=true

14
etc/systemd/resolved.conf.d/zz-local-resolver.conf Normal file
View File

@ -0,0 +1,14 @@
# Being at the end of the English alphabet, this file will take priority
# and override values of others with the unsets.
[Resolve]
DNSSEC=false
DNSOverTLS=false
Cache=false
DNS=
DNS=::1
DNS=127.0.0.1
FallbackDNS=
FallbackDNS=::1
FallbackDNS=127.0.0.1
Domains=~.
# vim: filetype=systemd