From bda95b6a1ce1a211a46846af347397536e6fe0ba Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Mon, 30 Apr 2018 17:51:59 +0300
Subject: [PATCH] roles/nginx: Default to Cloudflare public DNS for TLS
 stapling

No need to give Google even more data or free advertising by using
this as the default! In practice I always use the DNS servers from
the VPS provider anyways.
---
 roles/nginx/templates/https.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/nginx/templates/https.j2 b/roles/nginx/templates/https.j2
index a0734e9..29c490d 100644
--- a/roles/nginx/templates/https.j2
+++ b/roles/nginx/templates/https.j2
@@ -39,7 +39,7 @@
     # use Linode internal DNS
     resolver 139.162.139.5 139.162.130.5 [2a01:7e01::5] [2a01:7e01::6];
     {% else %}
-    resolver 8.8.8.8 8.8.4.4 [2001:4860:4860::8844] [2001:4860:4860::8888];
+    resolver 1.1.1.1 1.0.0.1 [2606:4700:4700::1111] [2606:4700:4700::1001];
     {% endif %} {# end: linode_id #}
     {% endif %} {# end: use_letsencrypt #}