# Local resolver (Unbound?) #nameserver 127.0.0.1 #nameserver ::1 # dnscrypt-proxy directly (Debian/systemd) #nameserver 127.0.2.1 # Quad9 IPv6 #1 nameserver 2620:fe::fe # CloudFlare IPv6 #2 #nameserver 2606:4700:4700::1001 # OpenDNS IPv4 #2 #nameserver 208.67.220.220 # Google DNS IPv4 #1 #nameserver 8.8.8.8 # Quad9 DNS IPv4 #1 nameserver 9.9.9.9 # Google DNS IPv6 #2 #nameserver 2001:4860:4860::8844 # Quad9 DNS IPv6 #2 nameserver 2620:fe::9 # CloudFlare IPv4 #1 #nameserver 1.1.1.1 # trust-ad option is required from glibc2.31+ to tell everything to trust # AD/DNSSEC in case there is a localhost DNS server that validates it options edns0 single-request-reopen #trust-ad # I am not entirely sure local is valid to use here. And this has a bad # habit of flooding nameserver with names I don't want it to know about # and in some cases there are _fun_ A/AAA responses to nonexistant domains. # !!! The systemd-resolved file to avoid search domains is # /usr/lib/systemd/resolv.conf #search mikaela.internal local mikaela.info # note and remember missing DNSSEC # use.opendns.com http://208.69.38.205/ # system.opendns.com http://208.69.38.170/ # For copy-pasting to nm-connection-editor # No OpenDNS for breaking DNSSEC. # 8.8.8.8, 1.1.1.1 # 2606:4700:4700::1001, 2001:4860:4860::8844 # 2019-07-22: I actually prefer Quad9 to Cloudflare and Google. # I am also a bit lost on what is my purpouse here considering # I have just done so much with dnscrypt-proxy & unbound # 149.112.112.112, 9.9.9.9 # 2620:fe::9, 2620:fe::fe # 2020-08-08: obviously the purpouse here is to be a random DNS note that # hopefully englightens future me when I need it on everything and nothing # related to DNS! # DNS-over-HTTPS # Quad9: https://dns.quad9.net/dns-query # Google: https://dns.google/dns-query # Cloudflare: https://cloudflare-dns.com/dns-query # https://mozilla.cloudflare-dns.com/dns-query # OpenDNS: https://doh.opendns.com/dns-query # Adguard: https://dns.adguard.com/dns-query # NextDNS: https://firefox.dns.nextdns.io # systemd-resolved symlink files: # !!! /run/systemd/resolve/stub-resolv.conf !!! /usr/lib/systemd/resolv.conf /run/systemd/resolve/resolv.conf # !!! /run/systemd/resolve/stub-resolv.conf !!! contains search domains and doesn't seem to be # overwritable and somehow works with Mullvad # https://github.com/mullvad/mullvadvpn-app/issues/1952 # /usr/lib/systemd/resolv.conf doesn't contain search domains, can # get overwritten and "broken" # /run/systemd/resolve/resolv.conf contains uplink resolvers and domains # SHOULDN'T BE USED!