2 files changed, 8 insertions, 5 deletions

diff --git a/hosts/surtr/default.nix b/hosts/surtr/default.nix
index 705f69b3..223e1f10 100644
--- a/hosts/surtr/default.nix
+++ b/hosts/surtr/default.nix
@@ -65,6 +65,12 @@ with lib;
         enable = true;
         rulesetFile = ./ruleset.nft;
       };
+      resolvconf = {
+        enable = true;
+        extraConfig = ''
+          name_servers='127.0.0.53'
+        '';
+      };
     };
 
     systemd.network = {
@@ -78,10 +84,7 @@ with lib;
       };
     };
 
-    services.resolved = {
-      llmnr = "false";
-      dnssec = "false"; # unbound does dnssec validation for us
-    };
+    services.resolved.enable = false;
 
     services.ndppd = {
       enable = true;
diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 65f46b35..53df798e 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -212,7 +212,7 @@ in {
 
       settings = {
         server = {
-          interface = ["lo@5353"];
+          interface = ["lo@5353" "127.0.0.53"];
           prefer-ip6 = true;
           access-control = ["127.0.0.0/8 allow" "::1/128 allow"];
           root-hints = "${pkgs.dns-root-data}/root.hints";