move users to depot, add gitignore

1 files changed, 36 insertions, 3 deletions

diff --git a/machines/t480/default.nix b/machines/t480/default.nix
index 0010f08..bfd695d 100644
--- a/machines/t480/default.nix
+++ b/machines/t480/default.nix
@@ -1,8 +1,12 @@
-{ inputs, ... }:
+{ inputs, depot, ... }:
 let
   inherit (inputs.nixos-hardware.nixosModules)
     lenovo-thinkpad-t480
     ;
+
+  inherit (depot.users)
+    kle
+    ;
 in
 {
   imports = [
@@ -13,18 +17,20 @@ in
 
   xnet = {
     desktop.enable = true;
-    users.enable = [ "kle" ];
+    # users.enable = [ "kle" ];
     disk = {
       enable = true;
       device = "/dev/nvme0n1";
     };
   };
 
+  users.users.kle = kle.nixos;
+
   networking = {
     hostName = "t480";
     useDHCP = false;
     dhcpcd.enable = false;
-    nameservers = [ "9.9.9.9" ];
+    nameservers = [ "127.0.0.1" ];
     networkmanager = {
       enable = true;
       dns = "none";
@@ -35,5 +41,32 @@ in
   programs.nm-applet.enable = true;
   services.fwupd.enable = true;
 
+  services.unbound = {
+    enable = true;
+    settings.server = {
+      interface = [ "127.0.0.1" ];
+      port = 53;
+      access-control = [ "127.0.0.1 allow" ];
+      harden-glue = true;
+      harden-dnssec-stripped = true;
+      use-caps-for-id = false;
+      prefetch = true;
+      edns-buffer-size = 1232;
+      hide-identity = true;
+      hide-version = true;
+    };
+
+    settings.forward-zone = [
+      {
+        name = ".";
+        forward-tls-upstream = true;
+        forward-addr = [
+          "9.9.9.9#dns.quad9.net"
+          "149.112.112.112#dns.quad9.net"
+        ];
+      }
+    ];
+  };
+
   xnet.persist = [ "/etc/NetworkManager/system-connections" ];
 }