From 14ed626f61908d63fd0f48320b9aaffcf8e77d03 Mon Sep 17 00:00:00 2001
From: Lorenz Leutgeb <lorenz@leutgeb.xyz>
Date: Wed, 17 Jun 2026 14:33:03 +0200
Subject: [PATCH] os/mxixin/dns: Remove stub listener

---
 os/mixin/common.nix |  2 ++
 os/mixin/dns.nix    | 40 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 42 insertions(+)
 create mode 100644 os/mixin/dns.nix

diff --git a/os/mixin/common.nix b/os/mixin/common.nix
index 435ae04..4bc8be0 100644
--- a/os/mixin/common.nix
+++ b/os/mixin/common.nix
@@ -4,6 +4,8 @@
   lib,
   ...
 }: {
+  imports = [./dns.nix];
+
   time.timeZone = "UTC";
   i18n.defaultLocale = "en_US.UTF-8";
 
diff --git a/os/mixin/dns.nix b/os/mixin/dns.nix
new file mode 100644
index 0000000..5b314f6
--- /dev/null
+++ b/os/mixin/dns.nix
@@ -0,0 +1,40 @@
+{
+  config,
+  lib,
+  ...
+}: let
+  dns =
+    # https://www.joindns4.eu/for-public
+    (builtins.map (ip: "${ip}#unfiltered.joindns4.eu") [
+      "2a13:1001::86:54:11:100"
+      "2a13:1001::86:54:11:200"
+      "86.54.11.100"
+      "86.54.11.200"
+    ])
+    ++
+    # https://quad9.net/service/service-addresses-and-features/#rec
+    (builtins.map (ip: "${ip}#dns.quad9.net") [
+      "2620:fe::fe"
+      "2620:fe::9"
+      "9.9.9.9"
+      "149.112.112.112"
+    ])
+    ++
+    # https://one.one.one.one/dns/
+    (builtins.map (ip: "${ip}#one.one.one.one") [
+      "2606:4700:4700::1111"
+      "2606:4700:4700::1001"
+      "1.1.1.1"
+      "1.0.0.1"
+    ]);
+in {
+  services = {
+    resolved.settings.Resolve = {
+      DNSOverTLS = true;
+      DNSStubListener = false;
+      FallbackDNS = dns;
+      LMNR = false;
+      MulticastDNS = false;
+    };
+  };
+}