infrastructure/modules/dgn-vm-variant.nix

{ config, lib, ... }:
let
  inherit (lib)
    mkEnableOption
    mkIf;

  cfg = config.dgn-vmVariant;
in

{
  options.dgn-vmVariant.enable = mkEnableOption "ACME settings." // { default = true; };

  config = mkIf cfg.enable {
    virtualisation.vmVariant = {
      services.resolved.dnssec = "false";
    };
  };
}