nixos/modules/server/unbound.nix

{ config, lib, pkgs, ... }:
with lib; {
  config =
    let
      cfg = config.elss.server.unbound;
    in
    mkIf cfg.enable {
      services = {
        resolved = {
          enable = true;
          dnssec = "true";
          llmnr = "true";
          fallbackDns = [ "127.0.0.1" "::1" ];
          extraConfig = ''
            DNS = 127.0.0.1 ::1
            Domains = ~.
          '';
        };
        unbound = {
          enable = true;
          settings.server.interface = [ "127.0.0.0" "::1" ];
        };
      };
      networking = {
        nameservers = [ "127.0.0.1" "::1"];
        resolvconf.useLocalResolver = true;
      };
    };
}