From 952b823bf2b9f06ca2090d8d5f95cdb13ecc0de7 Mon Sep 17 00:00:00 2001
From: Tobias Strobel <code@strobel.one>
Date: Wed, 9 Aug 2023 20:53:43 +0200
Subject: [PATCH] resolved.conf: allow-downgrade DNSSEC

---
 etc/systemd/resolved.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/systemd/resolved.conf b/etc/systemd/resolved.conf
index 2cd98a1..72639b3 100644
--- a/etc/systemd/resolved.conf
+++ b/etc/systemd/resolved.conf
@@ -3,4 +3,4 @@
 # Resolve mDNS hostnames via resolved, but leave the rest to Avahi
 MulticastDNS=resolve
 # Enable and enforce DNSSEC
-DNSSEC=true
+DNSSEC=allow-downgrade