machine_setup/ansible/roles/network/files/mullvad_dns_over_tls.conf
2023-03-25 09:57:16 -04:00

10 lines
395 B
Plaintext

[Resolve]
# Use this instead of the per-link DNS servers
Domains=~.
DNS=194.242.2.2#doh.mullvad.net [2a07:e340::2]#doh.mullvad.net
# Don't use built-in list of fallback DNS servers
FallbackDNS=
DNSOverTLS=yes
# DNSSEC=allow-downgrade # Validate DNSSEC only if upstream DNS server supports it
# DNSSEC=true # Always validate DNSSEC which breaks name resolution for servers that do not support it