4 files changed, 12 insertions, 5 deletions

diff --git a/deploy/flake.lock b/deploy/flake.lock
index 707b0cc..0302b8c 100644
--- a/deploy/flake.lock
+++ b/deploy/flake.lock
@@ -2783,7 +2783,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-CiSvuSJhnAe1dXxotdFprQMgXa4Pase+cchTdPcotno=",
+        "narHash": "sha256-uN1hah0fHMQoPHlU2DaCZSe6VEgbTbte//c7rLSwYQM=",
         "path": "../flakes",
         "type": "path"
       },
@@ -3903,7 +3903,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-CugQxVXifzrt4VHpWStcnNt4idRBiRtDxpYCQ4qtUxo=",
+        "narHash": "sha256-k4JkkQECOTq1uxe8nZe0Wmj+DfzX1KKF7lvDkEMK6vQ=",
         "path": "../systems/eldiron",
         "type": "path"
       },
diff --git a/flake.lock b/flake.lock
index 55c2a98..d1f5a88 100644
--- a/flake.lock
+++ b/flake.lock
@@ -2664,7 +2664,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-CiSvuSJhnAe1dXxotdFprQMgXa4Pase+cchTdPcotno=",
+        "narHash": "sha256-uN1hah0fHMQoPHlU2DaCZSe6VEgbTbte//c7rLSwYQM=",
         "path": "./flakes",
         "type": "path"
       },
@@ -3919,7 +3919,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-CugQxVXifzrt4VHpWStcnNt4idRBiRtDxpYCQ4qtUxo=",
+        "narHash": "sha256-k4JkkQECOTq1uxe8nZe0Wmj+DfzX1KKF7lvDkEMK6vQ=",
         "path": "../systems/eldiron",
         "type": "path"
       },
diff --git a/flakes/flake.lock b/flakes/flake.lock
index 4af2301..64c9100 100644
--- a/flakes/flake.lock
+++ b/flakes/flake.lock
@@ -3824,7 +3824,7 @@
       },
       "locked": {
         "lastModified": 1,
-        "narHash": "sha256-CugQxVXifzrt4VHpWStcnNt4idRBiRtDxpYCQ4qtUxo=",
+        "narHash": "sha256-k4JkkQECOTq1uxe8nZe0Wmj+DfzX1KKF7lvDkEMK6vQ=",
         "path": "../systems/eldiron",
         "type": "path"
       },
diff --git a/systems/eldiron/dns.nix b/systems/eldiron/dns.nix
index 3d5aafa..4ebb401 100644
--- a/systems/eldiron/dns.nix
+++ b/systems/eldiron/dns.nix
@@ -278,6 +278,13 @@ in
     networking.firewall.allowedTCPPorts = [ 53 ];
     users.users.named.extraGroups = [ "keys" ];
     services.bind = {
+      package = pkgs.bind.overrideAttrs(old: {
+        # Partially revert https://gitlab.isc.org/isc-projects/bind9/-/commit/fd96a418689593882485bb715b3cd76b9af6f968
+        # Some DNS server don’t sent the question section
+        postPatch = (old.postPatch or "") + ''
+          sed -i -e "/missing question section/{n;N;d;}" lib/dns/xfrin.c
+        '';
+      });
       enable = true;
       cacheNetworks = ["any"];
       extraOptions = ''