vidhar: ...

1 files changed, 2 insertions, 0 deletions

diff --git a/hosts/vidhar/dns/default.nix b/hosts/vidhar/dns/default.nix
index 1e16c885..5f42af78 100644
--- a/hosts/vidhar/dns/default.nix
+++ b/hosts/vidhar/dns/default.nix
@@ -17,12 +17,14 @@ in {
       resolveLocalQueries = false;
       stateDir = "/var/lib/unbound";
       localControlSocketPath = "/run/unbound/unbound.ctl";
+      enableRootTrustAnchor = false;
       settings = {
         server = {
           interface = ["lo" "lan"];
           prefer-ip6 = true;
           access-control = ["0.0.0.0/0 allow" "::/0 allow"];
           root-hints = "${pkgs.dns-root-data}/root.hints";
+          trust-anchor-file = "${pkgs.dns-root-data}/root.key";
 
           num-threads = 12;
           so-reuseport = true;