From 09a9037f1c384ad906a352a91380a4c3e7929939 Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Fri, 8 Sep 2023 20:32:17 +0200
Subject: [PATCH] Revert "Disable systemd-resolved"

This reverts commit 38f815ecf1fa188d0a5a389f73bcd01177f9687c.
---
 modules/default.nix | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/modules/default.nix b/modules/default.nix
index 72dc6b5..430d3df 100644
--- a/modules/default.nix
+++ b/modules/default.nix
@@ -127,7 +127,18 @@
       i18n.supportedLocales = (options.i18n.supportedLocales.default) ++ (lib.optionals config.sbruder.full [
         "de_DE.UTF-8/UTF-8"
       ]);
-      services.resolved.enable = lib.mkOverride 99 false;
+
+      services.resolved = {
+        # Set systemd-resolved’s fallback to Quad9 (instead of cloudflare/google)
+        fallbackDns = [ "9.9.9.9" "149.112.112.112" "2620:fe::fe" "2620:fe::9" ];
+        # Allow resolving single lable hostnames (e.g., hostnames on the local network)
+        llmnr = "false";
+        # resolved does not automatically append the search domain (for whatever reason)
+        extraConfig = ''
+          ResolveUnicastSingleLabel=yes
+          Cache=no-negative
+        '';
+      };
     }
     (lib.mkIf config.sbruder.full {
       services.fwupd.enable = true;