Disable DNSSEC validation at equinix

[chef.git] / cookbooks / networking / templates / default / resolved.conf.erb

diff --git a/cookbooks/networking/templates/default/resolved.conf.erb b/cookbooks/networking/templates/default/resolved.conf.erb
index f749388efeb216505933b5557fb337dc2a342309..d57e78828ff1674412cf954c770d66c5d01d702f 100644 (file)
--- a/cookbooks/networking/templates/default/resolved.conf.erb
+++ b/cookbooks/networking/templates/default/resolved.conf.erb
@@ -1,4 +1,5 @@
 [Resolve]
 DNS=<%= node[:networking][:nameservers].join(" ") %>
+FallbackDNS=1.1.1.1 9.9.9.10 8.8.8.8 2606:4700:4700::1111 2620:fe::10 2001:4860:4860::8888
 Domains=<%= node[:networking][:search].join(" ") %>
-DNSSEC=allow-downgrade
+DNSSEC=<%= node[:networking][:dnssec] %>