From 73ddb338cd7542f9569a9ab5cb0481b4f0636710 Mon Sep 17 00:00:00 2001
From: seraphim <18ycm9tx@anonaddy.me>
Date: Wed, 29 Jul 2026 22:09:05 +0700
Subject: .

---
 nixos/modules/system/network/default.nix | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 nixos/modules/system/network/default.nix

(limited to 'nixos/modules/system/network')

diff --git a/nixos/modules/system/network/default.nix b/nixos/modules/system/network/default.nix
new file mode 100644
index 0000000..a862235
--- /dev/null
+++ b/nixos/modules/system/network/default.nix
@@ -0,0 +1,32 @@
+{ ... }:
+
+{
+  networking.hostName = "opus";
+  networking.networkmanager.enable = true;
+  programs.amnezia-vpn.enable = true;
+
+  # Primary DNS via Mullvad DoT (Base mode)
+  networking.nameservers = [
+    "194.242.2.4#base.dns.mullvad.net"
+    "194.242.2.2#dns.mullvad.net"
+  ];
+
+  # systemd-resolved: Mullvad primary, Quad9 fallback
+  services.resolved = {
+    enable = true;
+    dnsovertls = "opportunistic";
+    dnssec = "false";
+    domains = [ "~." ];
+    fallbackDns = [
+      "9.9.9.9#dns.quad9.net"
+      "149.112.112.112#dns.quad9.net"
+    ];
+  };
+
+  # Avahi (Printer / Network Discovery)
+  services.avahi = {
+    enable = true;
+    nssmdns4 = true;
+    openFirewall = true;
+  };
+}
\ No newline at end of file
-- 
cgit v1.2.3