From 3b9507e5c487c4a140f9940b2f932b466d9106b6 Mon Sep 17 00:00:00 2001
From: Graham McIntire <graham@mcintire.me>
Date: Fri, 24 Jul 2026 11:13:29 -0500
Subject: [PATCH] fix(resolvers): mask systemd-resolved to prevent port 53
 conflict with unbound

---
 tofu/flatcar-resolver.bu  | 2 ++
 tofu/flatcar-resolver2.bu | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/tofu/flatcar-resolver.bu b/tofu/flatcar-resolver.bu
index f3e77d3..42d463f 100644
--- a/tofu/flatcar-resolver.bu
+++ b/tofu/flatcar-resolver.bu
@@ -111,6 +111,8 @@ storage:
 
 systemd:
   units:
+    - name: systemd-resolved.service
+      mask: true
     - name: docker.service
       enabled: true
     - name: unbound.service
diff --git a/tofu/flatcar-resolver2.bu b/tofu/flatcar-resolver2.bu
index 2cfd25e..d8db45d 100644
--- a/tofu/flatcar-resolver2.bu
+++ b/tofu/flatcar-resolver2.bu
@@ -111,6 +111,8 @@ storage:
 
 systemd:
   units:
+    - name: systemd-resolved.service
+      mask: true
     - name: docker.service
       enabled: true
     - name: unbound.service