From 8af87ef973667a8a430532a96a2d2913dd1147cd Mon Sep 17 00:00:00 2001
From: Joe Mou <dev@mou.fo>
Date: Thu, 28 Sep 2023 17:53:34 -0400
Subject: Disable DNSSEC validation

There may be more than one issue. Most distributions do not seem to
enable DNSSEC verification, so we'll disable for now too.

Related: https://github.com/systemd/systemd/pull/18563
---
 hostnix/weebnix/system.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'hostnix/weebnix')

diff --git a/hostnix/weebnix/system.nix b/hostnix/weebnix/system.nix
index 94dca6d..f625efd 100644
--- a/hostnix/weebnix/system.nix
+++ b/hostnix/weebnix/system.nix
@@ -41,5 +41,8 @@
     };
   };
 
+  # Problematic when the clock is unreliable (Pi has no RTC).
+  services.resolved.dnssec = "false";
+
   time.timeZone = "America/New_York";
 }
-- 
cgit v1.3.1