summaryrefslogtreecommitdiffstats
path: root/roles/network/templates/resolved.conf.j2
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2026-07-08 03:32:42 +0200
committerAhmed Abdelhalim <[email protected]>2026-07-08 03:32:42 +0200
commite06dc8a7b62ad3029503914602401d5f235ce442 (patch)
tree26ce42e8a55971dc5bbf11ba25a1984014f4f65f /roles/network/templates/resolved.conf.j2
parentbb0abab8308256c028c29e3732e53ef211cad613 (diff)
Refactor network role
Remove static IPv6 support from network role — all hosts use SLAAC (method=auto). Simplifies NM templates, argument_specs, and resolved.conf. gateway sysctl accept_ra=2 is now unconditional when gateway_enabled. Co-authored-by: Claude.ai
Diffstat (limited to 'roles/network/templates/resolved.conf.j2')
-rw-r--r--roles/network/templates/resolved.conf.j26
1 files changed, 3 insertions, 3 deletions
diff --git a/roles/network/templates/resolved.conf.j2 b/roles/network/templates/resolved.conf.j2
index ea4a818a..0354feeb 100644
--- a/roles/network/templates/resolved.conf.j2
+++ b/roles/network/templates/resolved.conf.j2
@@ -1,8 +1,8 @@
[Resolve]
DNS={{ network_ipv4_dns | default('1.1.1.1 2606:4700:4700::1111') }}
-FallbackDNS={{ network_ipv6_dns | default('8.8.8.8 2001:4860:4860::8888') }}
-DNSOverTLS={{ 'no' if (network_ipv4_dns is defined or network_ipv6_dns is defined) else 'yes' }}
-DNSSEC={{ 'no' if (network_ipv4_dns is defined or network_ipv6_dns is defined) else 'yes' }}
+FallbackDNS=8.8.8.8 2001:4860:4860::8888
+DNSOverTLS={{ 'no' if network_ipv4_dns is defined else 'yes' }}
+DNSSEC={{ 'no' if network_ipv4_dns is defined else 'yes' }}
# use interface-specific DNS when available but fall back to global (required for VPN DNS to work)
Domains=~.