From 6c3a9ef924cc4057f5f1e6020a9a3378132a476d Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Tue, 10 Mar 2026 18:11:13 +0100
Subject: [PATCH] networking: Completely disable dnssec and dnsovertls

---
 modules/nixos/networking/default.nix | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/modules/nixos/networking/default.nix b/modules/nixos/networking/default.nix
index 25f3093..e6bb605 100644
--- a/modules/nixos/networking/default.nix
+++ b/modules/nixos/networking/default.nix
@@ -43,10 +43,6 @@ in
       useDHCP = false;
     };
 
-    services.resolved = {
-      enable = true;
-      dnssec = "allow-downgrade";
-      dnsovertls = "opportunistic";
-    };
+    services.resolved.enable = true;
   };
 }