From c2c6b634279a8b18230bce3feaee99de5eae7dca Mon Sep 17 00:00:00 2001
From: SebastianStork <git@sstork.dev>
Date: Sun, 1 Mar 2026 23:51:18 +0100
Subject: [PATCH] networking/overlay: Disable dnssec

---
 modules/nixos/services/nebula/default.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/nixos/services/nebula/default.nix b/modules/nixos/services/nebula/default.nix
index 2fa908f..45e2a7c 100644
--- a/modules/nixos/services/nebula/default.nix
+++ b/modules/nixos/services/nebula/default.nix
@@ -133,6 +133,7 @@ in
         address = [ netCfg.overlay.cidr ];
         dns = netCfg.overlay.dnsServers;
         domains = [ netCfg.overlay.domain ];
+        networkConfig.DNSSEC = false;
       };
     };
   };