diff --git a/hosts/zaphod/services/unbound.nix b/hosts/zaphod/services/unbound.nix index 0622f7e..083d364 100644 --- a/hosts/zaphod/services/unbound.nix +++ b/hosts/zaphod/services/unbound.nix @@ -1,4 +1,4 @@ -{pkgs, ...}: { +{pkgs, lib, ...}: { # Enable DN42 Certificates security.pki.certificateFiles = [ (pkgs.fetchurl { @@ -20,13 +20,12 @@ "\"10.in-addr.arpa.\" nodefault" "\"d.f.ip6.arpa.\" nodefault" ]; - auto-trust-anchor-file = false; }; forward-zone = [ { name = "."; forward-addr = [ - "45.11.45.11" + "100.64.0.3" "9.9.9.9" ]; }