diff options
Diffstat (limited to 'machines/t480/default.nix')
| -rw-r--r-- | machines/t480/default.nix | 39 |
1 files changed, 36 insertions, 3 deletions
diff --git a/machines/t480/default.nix b/machines/t480/default.nix index 0010f08..bfd695d 100644 --- a/machines/t480/default.nix +++ b/machines/t480/default.nix @@ -1,8 +1,12 @@ -{ inputs, ... }: +{ inputs, depot, ... }: let inherit (inputs.nixos-hardware.nixosModules) lenovo-thinkpad-t480 ; + + inherit (depot.users) + kle + ; in { imports = [ @@ -13,18 +17,20 @@ in xnet = { desktop.enable = true; - users.enable = [ "kle" ]; + # users.enable = [ "kle" ]; disk = { enable = true; device = "/dev/nvme0n1"; }; }; + users.users.kle = kle.nixos; + networking = { hostName = "t480"; useDHCP = false; dhcpcd.enable = false; - nameservers = [ "9.9.9.9" ]; + nameservers = [ "127.0.0.1" ]; networkmanager = { enable = true; dns = "none"; @@ -35,5 +41,32 @@ in programs.nm-applet.enable = true; services.fwupd.enable = true; + services.unbound = { + enable = true; + settings.server = { + interface = [ "127.0.0.1" ]; + port = 53; + access-control = [ "127.0.0.1 allow" ]; + harden-glue = true; + harden-dnssec-stripped = true; + use-caps-for-id = false; + prefetch = true; + edns-buffer-size = 1232; + hide-identity = true; + hide-version = true; + }; + + settings.forward-zone = [ + { + name = "."; + forward-tls-upstream = true; + forward-addr = [ + "9.9.9.9#dns.quad9.net" + "149.112.112.112#dns.quad9.net" + ]; + } + ]; + }; + xnet.persist = [ "/etc/NetworkManager/system-connections" ]; } |