systemd-resolved must run for host DNS (nss/resolv.conf), but its stub listener on 127.0.0.53:53 conflicts with Unbound's bind to 0.0.0.0:53. Replace masking with DNSStubListener=no dropin + static resolv.conf pointing to 1.1.1.1 and 9.9.9.9, so the host can resolve without occupying port 53. |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| .terraform.lock.hcl | ||
| blocklist.rpz | ||
| cloudflare.tf | ||
| dns.tf | ||
| flatcar-resolver.bu | ||
| flatcar-resolver2.bu | ||
| main.tf | ||
| porkbun.tf | ||
| proxmox.tf | ||
| unbound.conf | ||
| variables.tf | ||