all repos — nixfiles @ 9c36363e18c2d1d97f84678d843425528c504944

System and user configuration, managed by nix and home-manager

router: include non-TLS DNS fallbacks (fix startup NTP sync) With only DNS-over-TLS enabled, answers to queries for NTP servers are rejected due to the (incorrect) system date not being within the validity window of the TLS certificate

Alin
commit

9c36363e18c2d1d97f84678d843425528c504944

parent

42ce143791ef5d00e1c98c3a7aa13808d88efd88

1 file changed, 10 insertions(+), 1 deletion(-)

changed files
M system/roles/router.nix → system/roles/router.nix
@@ -264,7 +264,16 @@ services.resolved = {
     enable = true;
     settings.Resolve = {
       DNS = myAddresses;
-      FallbackDNS = map (p: toString (map (ns: "${ns}#${p.hostname}") p.addresses)) allProviders;
+      FallbackDNS = map (
+        p:
+        toString (
+          builtins.concatMap (ns: [
+            "${ns}#${p.hostname}"
+            ns
+          ]) p.addresses
+        )
+      ) allProviders;
+
       LLMNR = false;
       MulticastDNS = true;
       DNSOverTLS = true;