summaryrefslogtreecommitdiffstats
path: root/roles/network/templates/resolved.conf.j2
blob: c083a2146e8434e80f17f184a36889afb5eca9cb (plain) (blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
[Resolve]
DNS=9.9.9.9 2620:fe::fe#quad9.net
FallbackDNS=1.1.1.1 2606:4700:4700::1111#cloudflare-dns.com 8.8.8.8 2001:4860:4860::8888#dns.google
DNSSEC=yes
DNSOverTLS=yes
# use interface-specific DNS when available but fall back to global (required for VPN DNS to work)
Domains=~.

# Enable multicast DNS for .local domain resolution (replaces avahi functionality)
MulticastDNS=yes

# Disable LLMNR to prevent reverse DNS lookup delays
LLMNR=no

Cache=yes
CacheFromLocalhost=no

# Reduce timeout for faster reverse DNS fallback
ResolveUnicastSingleLabel=no

# Enable DNS stub listener on 127.0.0.53:53
DNSStubListener=yes

# Read /etc/hosts file
ReadEtcHosts=yes

# Don't resolve single-label names via unicast DNS
ResolveUnicastSingleLabel=no