profiles/nixos/systemd.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

{lib, ...}: {
  services = {
    journald.extraConfig = ''
      MaxRetentionSec=1w
    '';
    resolved = {
      enable = lib.mkDefault true;
      dnssec = "allow-downgrade";
      extraConfig = ''
        [Resolve]
        DNS=1.1.1.1 1.0.0.1
        DNSOverTLS=yes
      '';
    };
  };
}