From 51c98925d1305df60d3134305234d2ad8e928d95 Mon Sep 17 00:00:00 2001
From: Malte Brandy <malte.brandy@maralorn.de>
Date: Fri, 4 Feb 2022 13:39:02 +0100
Subject: [PATCH] Switch from kresd to unbound

---
 nixos/machines/hera/mail.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nixos/machines/hera/mail.nix b/nixos/machines/hera/mail.nix
index 27541abe..56e28673 100644
--- a/nixos/machines/hera/mail.nix
+++ b/nixos/machines/hera/mail.nix
@@ -15,6 +15,7 @@ in
   imports = [ ../../roles "${(import ../../../nix/sources.nix).nixos-mailserver}" ];
 
   services = {
+    unbound.enable = true;
     prometheus.exporters = {
       postfix = {
         enable = true;
@@ -76,6 +77,7 @@ in
   mailserver = {
     dkimKeyDirectory = "/var/lib/opendkim/keys";
     enable = true;
+    localDnsResolver = false; # Use unbound instead.
     openFirewall = true;
     enableImapSsl = true;
     enableManageSieve = true;