From a0c61231f48afdf2d1c75f7c5757d969034e2630 Mon Sep 17 00:00:00 2001 From: Mikaela Suomalainen Date: Wed, 10 Feb 2021 16:12:42 +0200 Subject: [PATCH] systemd/resolved.conf.d: add snopyta-strict.conf While posting an example how I would do it I might as well put it here --- etc/systemd/resolved.conf.d/snopyta-strict.conf | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 etc/systemd/resolved.conf.d/snopyta-strict.conf diff --git a/etc/systemd/resolved.conf.d/snopyta-strict.conf b/etc/systemd/resolved.conf.d/snopyta-strict.conf new file mode 100644 index 00000000..17052602 --- /dev/null +++ b/etc/systemd/resolved.conf.d/snopyta-strict.conf @@ -0,0 +1,8 @@ +# Snopyta / systemd-resolved. For people who don't panic when DNSSEC or +# DoT doesn't work and captive portals attack? See README.md +[Resolve] +DNS=2a01:4f9:2a:1919::9301#fi.dot.dns.snopyta.org 95.216.24.230#fi.dot.dns.snopyta.org +Domains=~. +DNSSEC=true +DNSOverTLS=true +Cache=true