From e1821719160e20776ad936d0879822a222370e5e Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sat, 1 Jan 2022 00:41:37 +0000
Subject: [PATCH] ops/nixos: disable LLMNR

---
 ops/nixos/lib/client.nix | 1 -
 ops/nixos/lib/common.nix | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/ops/nixos/lib/client.nix b/ops/nixos/lib/client.nix
index b503d454f5..c53868881e 100644
--- a/ops/nixos/lib/client.nix
+++ b/ops/nixos/lib/client.nix
@@ -11,7 +11,6 @@ in
     my.home-manager.imports = lib.mkAfter [ ./home-manager/client.nix ];
     programs.ssh.startAgent = true;
     nix.gc.automatic = false;
-    services.resolved.llmnr = "true";
     networking.networkmanager.extraConfig = lib.mkAfter ''
       [connection]
       # Enable mDNS resolver/responder by default unless otherwise configured.
diff --git a/ops/nixos/lib/common.nix b/ops/nixos/lib/common.nix
index 29e944bb7c..234be40aa8 100644
--- a/ops/nixos/lib/common.nix
+++ b/ops/nixos/lib/common.nix
@@ -65,7 +65,7 @@ in
     ];
     services.resolved = {
       enable = true;
-      llmnr = lib.mkDefault "false";  # Re-enabled in client.
+      llmnr = "false";  # LLMNR breaks search domains.
       domains = config.networking.search;
       fallbackDns = [
         "8.8.8.8"