systemd-resolved → knot-resolver

mkosi.conf

@@ -19,6 +19,7 @@ Packages =
 	sudo
 	git
 	sqlite3
+	knot-resolver
 	man-db
 	curl
 	lsof

mkosi.extra/etc/knot-resolver/kresd.conf

@@ -0,0 +1,19 @@
+net.listen('127.0.0.50', 53, { kind = 'dns', freebind = true })
+
+-- Load useful modules
+modules = {
+	'hints > iterate',  -- Allow loading /etc/hosts or custom root hints
+	'stats',            -- Track internal statistics
+	'predict',          -- Prefetch expiring/frequent records
+}
+
+-- Forward requests to those resolvers over TLS
+policy.TLS_FORWARD({
+	-- UncensoredDNS <https://blog.uncensoreddns.org/>
+	{'2a01:3a0:53:53::', hostname='unicast.uncensoreddns.org'},
+	{'89.233.43.71',     hostname='unicast.uncensoreddns.org'},
+	{'2001:67c:28a4::',  hostname='anycast.uncensoreddns.org'},
+	{'91.239.100.100',   hostname='anycast.uncensoreddns.org'},
+})
+
+cache.size = 100 * MB

mkosi.extra/etc/resolv.conf

@@ -1 +1 @@
-nameserver 127.0.0.53
+nameserver 127.0.0.50

mkosi.extra/srv/servnest/core

@@ -1 +1 @@
-Subproject commit 808de3fdbfb87630970ddcdb49cfd14c7ba3c127
+Subproject commit 7330f3a7699b107de2df8547cc42af93f6a93fc3

mkosi.finalize

@@ -18,4 +18,5 @@ if [[ $OS = "arch" ]]; then
 	systemctl enable php-fpm
 fi
 
+systemctl enable kresd@0
 systemctl enable sftpgo