summaryrefslogtreecommitdiff
path: root/nixos/modules/system/network/default.nix
diff options
context:
space:
mode:
Diffstat (limited to 'nixos/modules/system/network/default.nix')
-rw-r--r--nixos/modules/system/network/default.nix32
1 files changed, 32 insertions, 0 deletions
diff --git a/nixos/modules/system/network/default.nix b/nixos/modules/system/network/default.nix
new file mode 100644
index 0000000..a862235
--- /dev/null
+++ b/nixos/modules/system/network/default.nix
@@ -0,0 +1,32 @@
+{ ... }:
+
+{
+ networking.hostName = "opus";
+ networking.networkmanager.enable = true;
+ programs.amnezia-vpn.enable = true;
+
+ # Primary DNS via Mullvad DoT (Base mode)
+ networking.nameservers = [
+ "194.242.2.4#base.dns.mullvad.net"
+ "194.242.2.2#dns.mullvad.net"
+ ];
+
+ # systemd-resolved: Mullvad primary, Quad9 fallback
+ services.resolved = {
+ enable = true;
+ dnsovertls = "opportunistic";
+ dnssec = "false";
+ domains = [ "~." ];
+ fallbackDns = [
+ "9.9.9.9#dns.quad9.net"
+ "149.112.112.112#dns.quad9.net"
+ ];
+ };
+
+ # Avahi (Printer / Network Discovery)
+ services.avahi = {
+ enable = true;
+ nssmdns4 = true;
+ openFirewall = true;
+ };
+} \ No newline at end of file