systemd-networkd: disable DNSSEC/DNSOverTLS by default as localhost

This commit is contained in:
Aminda Suomalainen 2024-04-22 13:16:14 +03:00
parent 3d58aee508
commit 7be1800002
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q
2 changed files with 4 additions and 0 deletions

View File

@ -31,8 +31,10 @@ DNS=127.0.0.1
DNS=127.0.0.53 DNS=127.0.0.53
#DNSSEC=true #DNSSEC=true
#DNSSEC=allow-downgrade #DNSSEC=allow-downgrade
DNSSEC=false
#DNSOverTLS=true #DNSOverTLS=true
#DNSOverTLS=opportunistic #DNSOverTLS=opportunistic
DNSOverTLS=false
# Search domains # Search domains
Domains=. Domains=.
# Enable systemd-timesyncd with `timedatectl set-ntp true`, may be specified # Enable systemd-timesyncd with `timedatectl set-ntp true`, may be specified

View File

@ -29,7 +29,9 @@ LLMNR=true
# systemd-resolved configuration # systemd-resolved configuration
#DNSSEC=true #DNSSEC=true
#DNSSEC=allow-downgrade #DNSSEC=allow-downgrade
DNSSEC=false
#DNSOverTLS=true #DNSOverTLS=true
#DNSOverTLS=opportunistic #DNSOverTLS=opportunistic
DNSOverTLS=false
# Search domains # Search domains
Domains=. Domains=.