From 6a78a9039df771b2b7065ddf2fd749242e11e9f6 Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Wed, 10 Apr 2024 00:31:05 +0200
Subject: [PATCH] nuc: fix dns setup for adguard

---
 hosts/nuc/modules/adguard/default.nix  | 5 ++++-
 hosts/nuc/modules/networks/default.nix | 6 +-----
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/hosts/nuc/modules/adguard/default.nix b/hosts/nuc/modules/adguard/default.nix
index c1c3af7..b368d88 100644
--- a/hosts/nuc/modules/adguard/default.nix
+++ b/hosts/nuc/modules/adguard/default.nix
@@ -5,6 +5,9 @@
   services.adguardhome = {
     enable = true;
     openFirewall = true;
-    settings.bind_port = 3000;
+    settings = {
+      dns.bind_hosts = [ "192.168.42.2" ];
+      http.address = "0.0.0.0:3000";
+    };
   };
 }
diff --git a/hosts/nuc/modules/networks/default.nix b/hosts/nuc/modules/networks/default.nix
index 7a1b8ba..01fc538 100644
--- a/hosts/nuc/modules/networks/default.nix
+++ b/hosts/nuc/modules/networks/default.nix
@@ -14,17 +14,12 @@
   };
   services.resolved = {
     enable = true;
-    # dnssec = "allow-downgrade";
     fallbackDns = [
       "9.9.9.9"
       "149.112.112.112"
       "2620:fe::fe"
       "2620:fe::9"
     ];
-    extraConfig = ''
-      [Resolve]
-      DNSStubListener=no
-    '';
   };
   systemd.network = {
     enable = true;
@@ -38,6 +33,7 @@
         DHCP = "yes";
         LLDP = true;
         EmitLLDP = "nearest-bridge";
+        DNSSEC = false;
       };
     };
   };