nyancat/flake
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

nixos/networking: use dns from dhcp

Browse source
This commit is contained in:
Guanran Wang 2024-03-28 03:52:51 +08:00
parent 2daa43f499
commit 28a16cfc8d
Signed by: nyancat
SSH key fingerprint: SHA256:8oWGKciPALWut/6WA27oFKofX+6Wtc0gQnsefXLQx/8
2 changed files with 3 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
nixos/profiles/common/core/networking/default.nix
View file

@ -1,37 +1,13 @@
{ {
networking.wireless.iwd.enable = true; networking.wireless.iwd.enable = true;
networking.nameservers = [ services.resolved.enable = true;
### AliDNS
"223.5.5.5#dns.alidns.com"
"223.6.6.6#dns.alidns.com"
"2400:3200::1#dns.alidns.com"
"2400:3200:baba::1#dns.alidns.com"
### Google DNS sops.secrets."wireless/wangxiaobo".path = "/var/lib/iwd/wangxiaobo.psk";
#"8.8.8.8#dns.google" sops.secrets."wireless/OpenWrt".path = "/var/lib/iwd/OpenWrt.psk";
#"8.8.4.4#dns.google"
#"2001:4860:4860::8888#dns.google"
#"2001:4860:4860::8844#dns.google"
];
### systemd-resolved
services.resolved = {
enable = true;
domains = ["~."];
dnssec = "true";
dnsovertls = "true";
};
### https://wiki.archlinux.org/title/Sysctl#Improving_performance ### https://wiki.archlinux.org/title/Sysctl#Improving_performance
boot.kernelModules = ["tcp_bbr"]; boot.kernelModules = ["tcp_bbr"];
boot.kernel.sysctl = { boot.kernel.sysctl = {
"net.ipv4.tcp_fastopen" = "3";
"net.ipv4.tcp_keepalive_time" = "80";
"net.ipv4.tcp_keepalive_intvl" = "10";
"net.ipv4.tcp_keepalive_probes" = "6";
"net.ipv4.tcp_mtu_probing" = "1";
"net.core.default_qdisc" = "cake"; "net.core.default_qdisc" = "cake";
"net.ipv4.tcp_congestion_control" = "bbr"; "net.ipv4.tcp_congestion_control" = "bbr";
}; };

4
nixos/profiles/common/graphical/default.nix
View file

@ -39,10 +39,6 @@
### Options ### Options
myFlake.boot.noLoaderMenu = lib.mkDefault true; myFlake.boot.noLoaderMenu = lib.mkDefault true;
### sops-nix
sops.secrets."wireless/wangxiaobo".path = "/var/lib/iwd/wangxiaobo.psk";
sops.secrets."wireless/OpenWrt".path = "/var/lib/iwd/OpenWrt.psk";
fonts.enableDefaultPackages = false; fonts.enableDefaultPackages = false;
security.pam.services.swaylock = {}; security.pam.services.swaylock = {};
xdg.portal = { xdg.portal = {