systemd-{resolved,networkd}: just break things

2024-04-22 15:43:50 +03:00 · 2024-04-22 15:43:50 +03:00 · 4560e776df
parent 886b8dbfbd
commit 4560e776df
3 changed files with 6 additions and 4 deletions
--- a/etc/systemd/network/10-ether.network
+++ b/etc/systemd/network/10-ether.network
@ -31,7 +31,8 @@ DNS=::1
 DNS=127.0.0.1
 DNS=127.0.0.53
 DNSSEC=true
-DNSOverTLS=opportunistic
+#DNSOverTLS=opportunistic
+DNSOverTLS=true
 # Search domains
 Domains=.
 # Enable systemd-timesyncd with `timedatectl set-ntp true`, may be specified
--- a/etc/systemd/network/10-wlan.network
+++ b/etc/systemd/network/10-wlan.network
@ -29,7 +29,7 @@ MulticastDNS=true
 LLMNR=true
 # systemd-resolved configuration
 DNSSEC=true
-DNSSEC=false
-DNSOverTLS=opportunistic
+#DNSOverTLS=opportunistic
+DNSOverTLS=true
 # Search domains
 Domains=.
--- a/etc/systemd/resolved.conf.d/00-defaults.conf
+++ b/etc/systemd/resolved.conf.d/00-defaults.conf
@ -8,7 +8,8 @@ DNSSEC=true
 # Take the risk of downgrade attacks. Web browser policies enforce
 # DNS-over-HTTPS anyway due to Encrypted Client Hello (ECH) still requiring
 # it.
-DNSOverTLS=opportunistic
+#DNSOverTLS=opportunistic
+DNSOverTLS=true
 Cache=true
 # Consider local DNS servers if they exist. Empty should erase previous values.
 DNS=