summaryrefslogtreecommitdiffstats
path: root/roles/network/templates/resolved.conf.j2
diff options
context:
space:
mode:
Diffstat (limited to 'roles/network/templates/resolved.conf.j2')
-rw-r--r--roles/network/templates/resolved.conf.j224
1 files changed, 24 insertions, 0 deletions
diff --git a/roles/network/templates/resolved.conf.j2 b/roles/network/templates/resolved.conf.j2
new file mode 100644
index 00000000..1893e882
--- /dev/null
+++ b/roles/network/templates/resolved.conf.j2
@@ -0,0 +1,24 @@
+[Resolve]
+DNS=1.1.1.1 2606:4700:4700::1111#cloudflare-dns.com 8.8.8.8 2001:4860:4860::8888#dns.google
+FallbackDNS=1.0.0.1 2606:4700:4700::1001#cloudflare-dns.com 8.8.4.4 2001:4860:4860::8844#dns.google 9.9.9.9 2620:fe::fe#quad9.net
+
+DNSSEC=yes
+DNSOverTLS=yes
+
+# Enable multicast DNS for .local domain resolution (replaces avahi functionality)
+MulticastDNS=yes
+
+# Enable LLMNR for Windows network compatibility
+LLMNR=yes
+
+Cache=yes
+CacheFromLocalhost=no
+
+# Enable DNS stub listener on 127.0.0.53:53
+DNSStubListener=yes
+
+# Read /etc/hosts file
+ReadEtcHosts=yes
+
+# Don't resolve single-label names via unicast DNS
+ResolveUnicastSingleLabel=no