nixos/common/networking.nix
Ivan Bushchik 9017e9e97d
Update celerrime host
Signed-off-by: Ivan Bushchik <ivabus@ivabus.dev>
2023-12-24 08:49:24 +03:00

37 lines
836 B
Nix

{ pkgs, lib, ... }:
{
networking.firewall.allowPing = true;
networking.useNetworkd = lib.mkDefault true;
systemd.network.wait-online.enable = lib.mkDefault false;
# Use systemd-resolved for DoT support.
services.resolved = {
enable = true;
dnssec = "false";
extraConfig = ''
DNSOverTLS=yes
'';
};
# Used by systemd-resolved, not directly by resolv.conf.
networking.nameservers =
[ "1.0.0.1#cloudflare-dns.com" "8.8.8.8#dns.google" ];
networking.enableIPv6 = true;
services.avahi = {
enable = true;
nssmdns4 = true;
};
services.chrony.enable = true;
networking.timeServers =
[ "ntp1.vniiftri.ru" "0.ru.pool.ntp.org" "0.pool.ntp.org" ];
# Useful tools
boot.kernelModules = [ "af_packet" ];
environment.systemPackages = with pkgs; [ mtr tcpdump traceroute ];
}