From 8e40a6962d45418beb98d164dbc4847e29b705eb Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Fri, 8 Apr 2022 16:08:34 +0200
Subject: surtr: ...

---
 hosts/surtr/dns/default.nix | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/hosts/surtr/dns/default.nix b/hosts/surtr/dns/default.nix
index 0a754a86..28e0df73 100644
--- a/hosts/surtr/dns/default.nix
+++ b/hosts/surtr/dns/default.nix
@@ -207,9 +207,12 @@ in {
 
       settings = {
         server = {
-          interface = ["127.0.0.1@5353" "::1@5353"];
+          interface = ["lo"];
+          prefer-ip6 = true;
           access-control = ["127.0.0.0/8 allow" "::1/128 allow"];
           root-hints = "${pkgs.dns-root-data}/root.hints";
+          trust-anchor-file = "${pkgs.dns-root-data}/root.key";
+          trust-anchor-signaling = false;
 
           num-threads = 12;
           so-reuseport = true;
-- 
cgit v1.2.3