summaryrefslogtreecommitdiffstats
path: root/man
diff options
context:
space:
mode:
Diffstat (limited to 'man')
-rw-r--r--man/systemd.network.xml35
1 files changed, 15 insertions, 20 deletions
diff --git a/man/systemd.network.xml b/man/systemd.network.xml
index e8e01f9094..82d50c9569 100644
--- a/man/systemd.network.xml
+++ b/man/systemd.network.xml
@@ -518,18 +518,14 @@ Table=1234</programlisting></para>
<varlistentry>
<term><varname>DNSOverTLS=</varname></term>
<listitem>
- <para>Takes a boolean or <literal>opportunistic</literal>.
- When true, enables
- <ulink
- url="https://tools.ietf.org/html/rfc7858">DNS-over-TLS</ulink>
- support on the link.
- When set to <literal>opportunistic</literal>, compatibility with
- non-DNS-over-TLS servers is increased, by automatically
- turning off DNS-over-TLS servers in this case.
- This option defines a per-interface setting for
+ <para>Takes a boolean or <literal>opportunistic</literal>. When true, enables
+ <ulink url="https://tools.ietf.org/html/rfc7858">DNS-over-TLS</ulink> support on the link.
+ When set to <literal>opportunistic</literal>, compatibility with non-DNS-over-TLS servers
+ is increased, by automatically turning off DNS-over-TLS servers in this case. This option
+ defines a per-interface setting for
<citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>'s
- global <varname>DNSOverTLS=</varname> option. Defaults to
- false. This setting is read by
+ global <varname>DNSOverTLS=</varname> option. Defaults to unset, and the global setting
+ will be used. This setting is read by
<citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
</listitem>
</varlistentry>
@@ -537,16 +533,15 @@ Table=1234</programlisting></para>
<term><varname>DNSSEC=</varname></term>
<listitem>
<para>Takes a boolean or <literal>allow-downgrade</literal>. When true, enables
- <ulink url="https://tools.ietf.org/html/rfc4033">DNSSEC</ulink>
- DNS validation support on the link. When set to
- <literal>allow-downgrade</literal>, compatibility with
- non-DNSSEC capable networks is increased, by automatically
- turning off DNSSEC in this case. This option defines a
- per-interface setting for
+ <ulink url="https://tools.ietf.org/html/rfc4033">DNSSEC</ulink> DNS validation support on
+ the link. When set to <literal>allow-downgrade</literal>, compatibility with non-DNSSEC
+ capable networks is increased, by automatically turning off DNSSEC in this case. This
+ option defines a per-interface setting for
<citerefentry><refentrytitle>resolved.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>'s
- global <varname>DNSSEC=</varname> option. Defaults to
- false. This setting is read by
- <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.</para>
+ global <varname>DNSSEC=</varname> option. Defaults to unset, and the global setting will be
+ used. This setting is read by
+ <citerefentry><refentrytitle>systemd-resolved.service</refentrytitle><manvolnum>8</manvolnum></citerefentry>.
+ </para>
</listitem>
</varlistentry>
<varlistentry>