From 28a16cfc8d02f1cf6a20280205f6ce870ba2edd6 Mon Sep 17 00:00:00 2001 From: Guanran Wang Date: Thu, 28 Mar 2024 03:52:51 +0800 Subject: [PATCH] nixos/networking: use dns from dhcp --- .../common/core/networking/default.nix | 30 ++----------------- nixos/profiles/common/graphical/default.nix | 4 --- 2 files changed, 3 insertions(+), 31 deletions(-) diff --git a/nixos/profiles/common/core/networking/default.nix b/nixos/profiles/common/core/networking/default.nix index cd670c1..673f912 100644 --- a/nixos/profiles/common/core/networking/default.nix +++ b/nixos/profiles/common/core/networking/default.nix @@ -1,37 +1,13 @@ { networking.wireless.iwd.enable = true; - networking.nameservers = [ - ### AliDNS - "223.5.5.5#dns.alidns.com" - "223.6.6.6#dns.alidns.com" - "2400:3200::1#dns.alidns.com" - "2400:3200:baba::1#dns.alidns.com" + services.resolved.enable = true; - ### Google DNS - #"8.8.8.8#dns.google" - #"8.8.4.4#dns.google" - #"2001:4860:4860::8888#dns.google" - #"2001:4860:4860::8844#dns.google" - ]; - - ### systemd-resolved - services.resolved = { - enable = true; - domains = ["~."]; - dnssec = "true"; - dnsovertls = "true"; - }; + sops.secrets."wireless/wangxiaobo".path = "/var/lib/iwd/wangxiaobo.psk"; + sops.secrets."wireless/OpenWrt".path = "/var/lib/iwd/OpenWrt.psk"; ### https://wiki.archlinux.org/title/Sysctl#Improving_performance boot.kernelModules = ["tcp_bbr"]; boot.kernel.sysctl = { - "net.ipv4.tcp_fastopen" = "3"; - - "net.ipv4.tcp_keepalive_time" = "80"; - "net.ipv4.tcp_keepalive_intvl" = "10"; - "net.ipv4.tcp_keepalive_probes" = "6"; - "net.ipv4.tcp_mtu_probing" = "1"; - "net.core.default_qdisc" = "cake"; "net.ipv4.tcp_congestion_control" = "bbr"; }; diff --git a/nixos/profiles/common/graphical/default.nix b/nixos/profiles/common/graphical/default.nix index a6e1ab0..c9b0eca 100755 --- a/nixos/profiles/common/graphical/default.nix +++ b/nixos/profiles/common/graphical/default.nix @@ -39,10 +39,6 @@ ### Options myFlake.boot.noLoaderMenu = lib.mkDefault true; - ### sops-nix - sops.secrets."wireless/wangxiaobo".path = "/var/lib/iwd/wangxiaobo.psk"; - sops.secrets."wireless/OpenWrt".path = "/var/lib/iwd/OpenWrt.psk"; - fonts.enableDefaultPackages = false; security.pam.services.swaylock = {}; xdg.portal = {