59 lines
1.1 KiB
Nix
59 lines
1.1 KiB
Nix
{ pkgs, ... }:
|
|
|
|
{
|
|
# Networking
|
|
networking.networkmanager = {
|
|
enable = true;
|
|
plugins = with pkgs; [
|
|
networkmanager-openvpn
|
|
];
|
|
};
|
|
|
|
networking.nameservers = [
|
|
"9.9.9.9"
|
|
"149.112.112.112"
|
|
"1.1.1.1"
|
|
"1.0.0.1"
|
|
"2620:fe::fe"
|
|
"2620:fe::9"
|
|
];
|
|
|
|
services.resolved = {
|
|
enable = false;
|
|
settings = {
|
|
Resolve = {
|
|
DNSOverTLS = true;
|
|
DNSSEC = true;
|
|
Domains = [ "~." ];
|
|
FallbackDns = [
|
|
"9.9.9.9"
|
|
"149.112.112.112"
|
|
"1.1.1.1"
|
|
"1.0.0.1"
|
|
"2620:fe::fe"
|
|
"2620:fe::9"
|
|
];
|
|
};
|
|
};
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [ wireguard-tools ];
|
|
|
|
# Captive portals
|
|
programs.captive-browser = {
|
|
enable = true;
|
|
interface = "wlp4s0";
|
|
};
|
|
|
|
# Firewall
|
|
networking.firewall.allowedTCPPorts = [ 24872 8998 ];
|
|
networking.firewall.allowedUDPPorts = [ 24872 8998 ];
|
|
# networking.firewall.enable = false;
|
|
|
|
# Network services
|
|
#services.openssh.enable = true;
|
|
|
|
# Bluetooth
|
|
hardware.bluetooth.enable = true;
|
|
hardware.bluetooth.powerOnBoot = true;
|
|
}
|