surtr: ...

1 files changed, 4 insertions, 1 deletions

diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 0a754a86..28e0df73 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -207,9 +207,12 @@ in {
 
       settings = {
         server = {
-          interface = ["127.0.0.1@5353" "::1@5353"];
+          interface = ["lo"];
+          prefer-ip6 = true;
           access-control = ["127.0.0.0/8 allow" "::1/128 allow"];
           root-hints = "${pkgs.dns-root-data}/root.hints";
+          trust-anchor-file = "${pkgs.dns-root-data}/root.key";
+          trust-anchor-signaling = false;
 
           num-threads = 12;
           so-reuseport = true;