37 lines
818 B
Nix
37 lines
818 B
Nix
{
|
|
lib,
|
|
config,
|
|
...
|
|
}: {
|
|
networking = {
|
|
useNetworkd = true;
|
|
dhcpcd.enable = false;
|
|
useDHCP = false;
|
|
firewall.enable = true;
|
|
# allow mdns port
|
|
firewall.allowedUDPPorts = [5353];
|
|
renameInterfacesByMac = lib.mkIf (!config.boot.isContainer) (
|
|
lib.mapAttrs (_: v: v.mac)
|
|
(config.secrets.secrets.local.networking.interfaces or {})
|
|
);
|
|
};
|
|
systemd.network = {
|
|
enable = true;
|
|
wait-online.anyInterface = true;
|
|
};
|
|
system.nssDatabases.hosts = lib.mkMerge [
|
|
(lib.mkBefore ["mdns_minimal [NOTFOUND=return]"])
|
|
(lib.mkAfter ["mdns"])
|
|
];
|
|
services.resolved = {
|
|
enable = true;
|
|
# man I whish dnssec would be viable to use
|
|
dnssec = "allow-downgrade";
|
|
llmnr = "false";
|
|
extraConfig = ''
|
|
Domains=~.
|
|
MulticastDNS=true
|
|
'';
|
|
};
|
|
}
|