nixos/common/networking.nix
Ivan Bushchik 00abc64e54
Migrate to chrony + add ntp-server role + minor fixes
Signed-off-by: Ivan Bushchik <ivabus@ivabus.dev>
2023-09-02 22:14:56 +03:00

46 lines
999 B
Nix

{ pkgs, lib, ... }:
{
networking.firewall.allowPing = true;
networking.useNetworkd = lib.mkDefault true;
systemd.network.wait-online.enable = lib.mkDefault false;
# Use systemd-resolved for DoT support.
services.resolved = {
enable = true;
dnssec = "false";
extraConfig = ''
DNSOverTLS=yes
'';
};
# Used by systemd-resolved, not directly by resolv.conf.
networking.nameservers = [
"8.8.8.8#dns.google"
"1.0.0.1#cloudflare-dns.com"
];
networking.enableIPv6 = true;
services.avahi = {
enable = true;
nssmdns = true;
publish = {
enable = true;
addresses = true;
domain = true;
hinfo = true;
userServices = true;
workstation = true;
};
};
services.chrony.enable = true;
networking.timeServers = [ "ntp1.vniiftri.ru" "0.ru.pool.ntp.org" "0.pool.ntp.org" ];
# Useful tools
boot.kernelModules = [ "af_packet" ];
environment.systemPackages = with pkgs; [ mtr tcpdump traceroute ];
}