nixos-config/nixos/profiles/services/resolved/default.nix

{ ... }:
{
  services.resolved = {
    enable = true;
    llmnr = "false";
    extraConfig = ''
      MulticastDNS=off
      DNSStubListener=no
    '';
  };
}