diff options
| author | seraphim <18ycm9tx@anonaddy.me> | 2026-07-29 22:09:05 +0700 |
|---|---|---|
| committer | seraphim <18ycm9tx@anonaddy.me> | 2026-07-29 22:09:05 +0700 |
| commit | 73ddb338cd7542f9569a9ab5cb0481b4f0636710 (patch) | |
| tree | 559d8c542d6e965e674a46c9451efc1cb80f203a /nixos/modules/system/network/default.nix | |
| parent | abd12d161f0aaac458abeb139556ea5ccc1fcae8 (diff) | |
.
Diffstat (limited to 'nixos/modules/system/network/default.nix')
| -rw-r--r-- | nixos/modules/system/network/default.nix | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/nixos/modules/system/network/default.nix b/nixos/modules/system/network/default.nix new file mode 100644 index 0000000..a862235 --- /dev/null +++ b/nixos/modules/system/network/default.nix @@ -0,0 +1,32 @@ +{ ... }: + +{ + networking.hostName = "opus"; + networking.networkmanager.enable = true; + programs.amnezia-vpn.enable = true; + + # Primary DNS via Mullvad DoT (Base mode) + networking.nameservers = [ + "194.242.2.4#base.dns.mullvad.net" + "194.242.2.2#dns.mullvad.net" + ]; + + # systemd-resolved: Mullvad primary, Quad9 fallback + services.resolved = { + enable = true; + dnsovertls = "opportunistic"; + dnssec = "false"; + domains = [ "~." ]; + fallbackDns = [ + "9.9.9.9#dns.quad9.net" + "149.112.112.112#dns.quad9.net" + ]; + }; + + # Avahi (Printer / Network Discovery) + services.avahi = { + enable = true; + nssmdns4 = true; + openFirewall = true; + }; +}
\ No newline at end of file |