add systems

modules/systems/networking/base/nixos.nix

@@ -0,0 +1,12 @@
+{ lib, ... }:
+{
+  networking.nameservers = lib.mkDefault [
+    "1.1.1.1"
+    "1.0.0.1"
+    "10.50.80.53"
+    "10.50.80.54"
+  ];
+
+  services.resolved.enable = lib.mkDefault false;
+  security.pki.certificateFiles = [ ./root_ca.crt ];
+}

modules/systems/networking/base/root_ca.crt

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE-----
+MIIBszCCAVqgAwIBAgIRAPCAxajuCEmnXKploQS+KAkwCgYIKoZIzj0EAwIwODEW
+MBQGA1UEChMNTW9vbnMgSG9tZSBDQTEeMBwGA1UEAxMVTW9vbnMgSG9tZSBDQSBS
+b290IENBMB4XDTI1MTIwNjE4MDgwN1oXDTM1MTIwNDE4MDgwN1owODEWMBQGA1UE
+ChMNTW9vbnMgSG9tZSBDQTEeMBwGA1UEAxMVTW9vbnMgSG9tZSBDQSBSb290IENB
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEDw2M0NQMju2zN5ZXwsYaTieWggId
+XmRSXjOHW4/pBEI11xk1GkMFbeVmppr1cbcNmbB+fmxoFa+oKguhFDSsdaNFMEMw
+DgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQEwHQYDVR0OBBYEFGuC
+UGL5CxdamFfBVC8xH306Wo6xMAoGCCqGSM49BAMCA0cAMEQCIBqWCNWBuwhWDYoi
+fpqOqz2HSChOsKCIAgfTJlUUgSlSAiALekUJ+4M+L4/vP4GpkrSovuQ7JOMXV44+
+30Pcx4AoJg==
+-----END CERTIFICATE-----

modules/systems/networking/nixos.nix

@@ -1,3 +0,0 @@
-{
-  networking.networkmanager.enable = true;
-}

modules/systems/networking/wifi/nixos.nix

@@ -0,0 +1,25 @@
+{
+  networking = {
+    networkmanager = {
+      enable = true;
+      dns = "none";
+      wifi = {
+        powersave = false;
+        backend = "wpa_supplicant";
+      };
+      settings = {
+        "device"."wifi.scan-rand-mac-address" = "no";
+        "connection"."wifi.cloned-mac-address" = "permanent";
+      };
+    };
+    wireless.iwd.enable = false;
+  };
+
+  boot.extraModprobeConfig = ''
+    options cfg80211 ieee80211_regdom=JP
+    options iwlwifi power_save=0
+    options iwlwifi uapsd_disable=1
+  '';
+
+  programs.nm-applet.enable = true;
+}