blob: bfd695d5e1a538ce706d24d9c9b7bb6b74cffeac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
|
{ inputs, depot, ... }:
let
inherit (inputs.nixos-hardware.nixosModules)
lenovo-thinkpad-t480
;
inherit (depot.users)
kle
;
in
{
imports = [
lenovo-thinkpad-t480
];
system.stateVersion = "24.05";
xnet = {
desktop.enable = true;
# users.enable = [ "kle" ];
disk = {
enable = true;
device = "/dev/nvme0n1";
};
};
users.users.kle = kle.nixos;
networking = {
hostName = "t480";
useDHCP = false;
dhcpcd.enable = false;
nameservers = [ "127.0.0.1" ];
networkmanager = {
enable = true;
dns = "none";
wifi.powersave = true;
};
};
programs.nm-applet.enable = true;
services.fwupd.enable = true;
services.unbound = {
enable = true;
settings.server = {
interface = [ "127.0.0.1" ];
port = 53;
access-control = [ "127.0.0.1 allow" ];
harden-glue = true;
harden-dnssec-stripped = true;
use-caps-for-id = false;
prefetch = true;
edns-buffer-size = 1232;
hide-identity = true;
hide-version = true;
};
settings.forward-zone = [
{
name = ".";
forward-tls-upstream = true;
forward-addr = [
"9.9.9.9#dns.quad9.net"
"149.112.112.112#dns.quad9.net"
];
}
];
};
xnet.persist = [ "/etc/NetworkManager/system-connections" ];
}
|
