From e719948a3e1be037c2c618fa6c18ee192084c320 Mon Sep 17 00:00:00 2001 From: Tom Alexander Date: Sat, 5 Sep 2026 09:46:36 -0400 Subject: [PATCH] Switch to quad9 for DNS. Mullvad is shutting down their public DNS. ref: https://mullvad.net/en/blog/shutting-down-our-public-encrypted-dns-servers-and-sponsoring-quad9-instead --- nix/configuration/roles/network/default.nix | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) diff --git a/nix/configuration/roles/network/default.nix b/nix/configuration/roles/network/default.nix index 85de952..45b69e2 100644 --- a/nix/configuration/roles/network/default.nix +++ b/nix/configuration/roles/network/default.nix @@ -6,6 +6,8 @@ }: # Alternative DNS servers: +# "194.242.2.2#doh.mullvad.net" +# "2a07:e340::2#doh.mullvad.net" # "1.0.0.1#cloudflare-dns.com" # "1.1.1.1#cloudflare-dns.com" # "2606:4700:4700::1001#cloudflare-dns.com" @@ -14,6 +16,10 @@ # "8.8.8.8#dns.google" # "2001:4860:4860::8844#dns.google" # "2001:4860:4860::8888#dns.google" +# "9.9.9.10#dns10.quad9.net" +# "149.112.112.10#dns10.quad9.net" +# "2620:fe::10#dns10.quad9.net" +# "2620:fe::fe:10#dns10.quad9.net" let patchScriptBin = @@ -39,8 +45,10 @@ in networking.dhcpcd.enable = lib.mkDefault false; networking.useDHCP = lib.mkDefault false; networking.nameservers = [ - "194.242.2.2#doh.mullvad.net" - "2a07:e340::2#doh.mullvad.net" + "9.9.9.10#dns10.quad9.net" + "149.112.112.10#dns10.quad9.net" + "2620:fe::10#dns10.quad9.net" + "2620:fe::fe:10#dns10.quad9.net" ]; services.resolved = { enable = true;