modules/system/networking/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

{
  lib,
  pkgs,
  config,
  ...
}:
{
  imports = [
    ./firewall
    ./vpn
    ./dhcpcd.nix
    ./ipv6.nix
    ./loopback.nix
    ./networkmanager.nix
    ./optimise.nix
    ./resolved.nix
    ./tor.nix
  ];

  networking = {
    hostName = "kansai";
    nftables.enable = true;

    nameservers = [
      "1.1.1.1#one.one.one.one"
      "1.0.0.1#one.one.one.one"
      "9.9.9.9#dns.quad9.net"
      "149.112.112.112#dns.quad9.net"
    ];

    timeServers = [
      "0.nixos.pool.ntp.org"
      "1.nixos.pool.ntp.org"
      "2.nixos.pool.ntp.org"
      "3.nixos.pool.ntp.org"
    ];
  };

  environment.etc."resolv.conf" = lib.mkForce {
    source = pkgs.writeText "resolv.conf" ''
      ${lib.concatStringsSep "\n" (map (ns: "nameserver ${ns}") config.networking.nameservers)}
      options edns0
    '';
  };
}