From 3fc9846bf7e3c9b34aa8dcfef1a0992e3dad43fc Mon Sep 17 00:00:00 2001
From: Simon Bruder <simon@sbruder.de>
Date: Wed, 10 Feb 2021 14:22:00 +0100
Subject: [PATCH] vueko: resolved: Disable dnssec

---
 machines/vueko/configuration.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/machines/vueko/configuration.nix b/machines/vueko/configuration.nix
index d599500..69dd758 100644
--- a/machines/vueko/configuration.nix
+++ b/machines/vueko/configuration.nix
@@ -39,6 +39,10 @@ in
 
   system.stateVersion = "20.09";
 
+  # sadly, too many (legitimate) mail servers have broken dnssec on reverse
+  # lookups
+  services.resolved.dnssec = "false";
+
   services.nginx = {
     enable = true;