Files
dotfiles/modules/core/network.nix
T
2025-11-07 18:06:28 +09:00

63 lines
1.5 KiB
Nix

{ host, pkgs, ... }:
{
networking = {
hostName = "${host}";
nameservers = [ "127.0.0.1" "::1" ];
networkmanager = {
enable = true;
dns = "none";
wifi.powersave = false;
wifi.backend = "wpa_supplicant";
settings = {
"device"."wifi.scan-rand-mac-address" = "no";
"connection"."wifi.cloned-mac-address" = "permanent";
};
};
wireless.iwd.enable = false;
};
boot.extraModprobeConfig = ''
options cfg80211 ieee80211_regdom=JP
options iwlwifi power_save=0
options iwlwifi uapsd_disable=1
'';
services.resolved.enable = false;
environment.systemPackages = [
pkgs.networkmanagerapplet
];
programs.nm-applet.enable = true;
services.dnscrypt-proxy2 = {
enable = true;
settings = {
doh_servers = true;
dnscrypt_servers = false;
ipv6_servers = true;
require_dnssec = true;
require_nolog = true;
require_nofilter = true;
sources.public-resolvers = {
urls = [
"https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
"https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
];
cache_file = "/var/cache/dnscrypt-proxy/public-resolvers.md";
minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
};
server_names = [ "cloudflare" "quad9-doh" ];
listen_addresses = [ "127.0.0.1:53" "[::1]:53" ];
};
};
}