From 5848437e3fa357fdc1e4c3b8f1abb0d691b65aa3 Mon Sep 17 00:00:00 2001
From: Eli Ribble <eli@theribbles.org>
Date: Fri, 16 Aug 2024 17:47:25 -0700
Subject: [PATCH] Disable the stub resolved listener.

I want pihole to bind all available addresses itself, without listing
them, so I need all the port 53s to be free on all addresses. This will
also mean that the server itself will go through pihole.
---
 quinn/etc/nixos/configuration.nix | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/quinn/etc/nixos/configuration.nix b/quinn/etc/nixos/configuration.nix
index 7686589..4e697fb 100644
--- a/quinn/etc/nixos/configuration.nix
+++ b/quinn/etc/nixos/configuration.nix
@@ -183,6 +183,13 @@
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
 
+  # Disable the resolved stub listener, let Pihole do it
+  services.resolved = {
+    extraConfig = ''
+      DNSStubListener=no
+    '';
+  };
+
   # Set up a samba share for the scanner
   services.samba = {
     enable = true;