network: disable systemd-resolved fallback dns

This might not be the best idea, but serves as a reminder to consider sensitive deployments in the future.
2024-11-10 14:19:29 +01:00 · 2024-11-10 14:19:29 +01:00 · f406d0f98d
commit f406d0f98d
parent 2ce98c3fc0
1 changed files with 4 additions and 0 deletions
--- a/modules/network.nix
+++ b/modules/network.nix
@ -8,6 +8,10 @@
    firewall.enable = false;
  };

+  services.resolved = {
+    fallbackDns = [ ];  # Disable fallback DNS. DNS will fail if resolvers are unconfigured
+  };
+
  # Faster boot.
  systemd.network.wait-online.enable = false;
 }