From 4b4fbf3c6a38f4f6b0c6a0891dc2587729e71954 Mon Sep 17 00:00:00 2001
From: Stefan Ellmauthaler <stefan.ellmauthaler@tu-dresden.de>
Date: Wed, 5 Oct 2022 13:54:36 +0200
Subject: [PATCH] Allow dnssec to allow-downgrade

---
 modules/server/unbound.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/server/unbound.nix b/modules/server/unbound.nix
index 8b17c72..3fbd5fd 100644
--- a/modules/server/unbound.nix
+++ b/modules/server/unbound.nix
@@ -12,7 +12,7 @@ with lib; {
       services = {
         resolved = {
           enable = true;
-          dnssec = "true";
+          dnssec = "allow-downgrade";
           llmnr = "true";
           fallbackDns = ["127.0.0.1" "::1"];
           extraConfig = ''