From 2994652970e30805a9ebcc1eab62b5bc04901123 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Mon, 6 Aug 2018 14:35:58 +0200
Subject: yggdrasil negative trust anchors

---
 hel.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'hel.nix')

diff --git a/hel.nix b/hel.nix
index d2f43848..d735a365 100644
--- a/hel.nix
+++ b/hel.nix
@@ -569,6 +569,13 @@
     '';
   };
 
+  systemd.network.networks."yggdrasil" = {
+    name = "yggdrasil";
+    networkConfig = {
+      DNSSECNegativeTrustAnchors = [ "10.in-addr.arpa" "yggdrasil" "168.192.in-addr.arpa" "box" ];
+    };
+  };
+
   system = {
     stateVersion = "16.09";
   };
-- 
cgit v1.2.3