nixos/networking: use dns from dhcp
This commit is contained in:
parent
2daa43f499
commit
28a16cfc8d
2 changed files with 3 additions and 31 deletions
|
@ -1,37 +1,13 @@
|
||||||
{
|
{
|
||||||
networking.wireless.iwd.enable = true;
|
networking.wireless.iwd.enable = true;
|
||||||
networking.nameservers = [
|
services.resolved.enable = true;
|
||||||
### AliDNS
|
|
||||||
"223.5.5.5#dns.alidns.com"
|
|
||||||
"223.6.6.6#dns.alidns.com"
|
|
||||||
"2400:3200::1#dns.alidns.com"
|
|
||||||
"2400:3200:baba::1#dns.alidns.com"
|
|
||||||
|
|
||||||
### Google DNS
|
sops.secrets."wireless/wangxiaobo".path = "/var/lib/iwd/wangxiaobo.psk";
|
||||||
#"8.8.8.8#dns.google"
|
sops.secrets."wireless/OpenWrt".path = "/var/lib/iwd/OpenWrt.psk";
|
||||||
#"8.8.4.4#dns.google"
|
|
||||||
#"2001:4860:4860::8888#dns.google"
|
|
||||||
#"2001:4860:4860::8844#dns.google"
|
|
||||||
];
|
|
||||||
|
|
||||||
### systemd-resolved
|
|
||||||
services.resolved = {
|
|
||||||
enable = true;
|
|
||||||
domains = ["~."];
|
|
||||||
dnssec = "true";
|
|
||||||
dnsovertls = "true";
|
|
||||||
};
|
|
||||||
|
|
||||||
### https://wiki.archlinux.org/title/Sysctl#Improving_performance
|
### https://wiki.archlinux.org/title/Sysctl#Improving_performance
|
||||||
boot.kernelModules = ["tcp_bbr"];
|
boot.kernelModules = ["tcp_bbr"];
|
||||||
boot.kernel.sysctl = {
|
boot.kernel.sysctl = {
|
||||||
"net.ipv4.tcp_fastopen" = "3";
|
|
||||||
|
|
||||||
"net.ipv4.tcp_keepalive_time" = "80";
|
|
||||||
"net.ipv4.tcp_keepalive_intvl" = "10";
|
|
||||||
"net.ipv4.tcp_keepalive_probes" = "6";
|
|
||||||
"net.ipv4.tcp_mtu_probing" = "1";
|
|
||||||
|
|
||||||
"net.core.default_qdisc" = "cake";
|
"net.core.default_qdisc" = "cake";
|
||||||
"net.ipv4.tcp_congestion_control" = "bbr";
|
"net.ipv4.tcp_congestion_control" = "bbr";
|
||||||
};
|
};
|
||||||
|
|
|
@ -39,10 +39,6 @@
|
||||||
### Options
|
### Options
|
||||||
myFlake.boot.noLoaderMenu = lib.mkDefault true;
|
myFlake.boot.noLoaderMenu = lib.mkDefault true;
|
||||||
|
|
||||||
### sops-nix
|
|
||||||
sops.secrets."wireless/wangxiaobo".path = "/var/lib/iwd/wangxiaobo.psk";
|
|
||||||
sops.secrets."wireless/OpenWrt".path = "/var/lib/iwd/OpenWrt.psk";
|
|
||||||
|
|
||||||
fonts.enableDefaultPackages = false;
|
fonts.enableDefaultPackages = false;
|
||||||
security.pam.services.swaylock = {};
|
security.pam.services.swaylock = {};
|
||||||
xdg.portal = {
|
xdg.portal = {
|
||||||
|
|
Loading…
Reference in a new issue