From aa7b587dde3cafc94a421fc494680a426dec4d5b Mon Sep 17 00:00:00 2001
From: Daniel Langbein <daniel@systemli.org>
Date: Tue, 24 Sep 2024 16:21:49 +0200
Subject: [PATCH] add todo unencrypted dns

---
 modules/base.nix            |  3 +++
 modules/dns-unencrypted.nix | 11 +++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 modules/dns-unencrypted.nix

diff --git a/modules/base.nix b/modules/base.nix
index 8633ca9..f3d856f 100644
--- a/modules/base.nix
+++ b/modules/base.nix
@@ -2,7 +2,10 @@
 {
   imports = [
     # DNS settings.
+    # TODO add nix option
     ./dns.nix
+    #./dns-unencrypted.nix
+
     # Nix garbage collection.
     ./nix-gc.nix
     # Display contact information during boot.
diff --git a/modules/dns-unencrypted.nix b/modules/dns-unencrypted.nix
new file mode 100644
index 0000000..973e25d
--- /dev/null
+++ b/modules/dns-unencrypted.nix
@@ -0,0 +1,11 @@
+{ config, pkgs, ... }:
+{
+  networking.nameservers = [
+    # https://www.kuketz-blog.de/empfehlungsecke/#dns
+    # unfiltered.adguard-dns.com (supports DNSSEC)
+   "94.140.14.140" "94.140.14.141"
+    # https://www.kuketz-blog.de/empfehlungsecke/#dns
+    # dot.ffmuc.net (supports DNSSEC)
+   "5.1.66.255" "185.150.99.255"
+  ];
+}