From 40d4500f9d5eaf4c3c7df983156cc6b1703f6377 Mon Sep 17 00:00:00 2001
From: dadada <dadada@dadada.li>
Date: Tue, 3 Jan 2023 11:36:10 +0100
Subject: [PATCH] disable serving expired DNS entries

This should be fine, since popular names are prefetched and should therefore not expire that often.
---
 nixos/modules/networking.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/networking.nix b/nixos/modules/networking.nix
index e47be1d..07ad57d 100644
--- a/nixos/modules/networking.nix
+++ b/nixos/modules/networking.nix
@@ -42,7 +42,7 @@ in
 
           prefetch = true;
           prefetch-key = true;
-          serve-expired = true;
+          serve-expired = false;
 
           aggressive-nsec = true;
           hide-identity = true;