stubby: make resolv.conf immutable
This commit is contained in:
parent
eab95c0265
commit
857537342a
1 changed files with 8 additions and 1 deletions
|
@ -1,4 +1,4 @@
|
|||
{ ... }: {
|
||||
{ pkgs, ... }: {
|
||||
services.stubby = {
|
||||
enable = true;
|
||||
upstreamServers = ''
|
||||
|
@ -21,6 +21,13 @@
|
|||
};
|
||||
};
|
||||
|
||||
system.activationScripts.immutableDns = {
|
||||
text = ''
|
||||
${pkgs.e2fsprogs}/bin/chattr +i /etc/resolv.conf
|
||||
'';
|
||||
deps = [ ];
|
||||
};
|
||||
|
||||
networking = {
|
||||
networkmanager.dns = "none";
|
||||
resolvconf.dnsExtensionMechanism = false;
|
||||
|
|
Loading…
Reference in a new issue