depot/ops
Luke Granger-Brown 05be94e4d7 ops/nixos/common: disable DNSSEC in systemd-resolved
It's super broken.

At the moment, resolving foss.heptapod.net breaks, because clever-cloud.com has
DNSKEY records but there's no matching DS record at .com for it.

There are also other reports: https://github.com/systemd/systemd/issues/12388

tl;dr: it just doesn't work, let's not use that.
2022-01-08 12:09:26 +00:00
..
maint ops/maint/update_nixpkgs: remove propagatedBuildInputs 2020-11-25 13:19:35 +00:00
nixos ops/nixos/common: disable DNSSEC in systemd-resolved 2022-01-08 12:09:26 +00:00
raritan ops/raritan/ssl-renew: init 2021-07-17 01:33:01 +00:00
secrets ops/secrets: add rundeck_deployer_rsa.pub 2021-04-10 20:01:31 +00:00
default.nix ops/raritan/ssl-renew: init 2021-07-17 01:33:01 +00:00
home-manager-ext.nix ci-root: actually index with current system (oops) 2021-04-09 19:31:58 +01:00