My Nix Configuration
1{ lib, pkgs, ... }:
2{
3 networking = {
4 enableB43Firmware = false;
5 enableIPv6 = true;
6 hostId = "28c6bad2";
7 hostName = "zaphod";
8 usePredictableInterfaceNames = lib.mkDefault true;
9 # Interface config
10 interfaces.wlp1s0.useDHCP = lib.mkDefault true;
11 # Enable NetworkManager and disable wpa_supplicant
12 networkmanager = {
13 enable = true;
14 dns = lib.mkForce "default";
15 wifi.powersave = true;
16 };
17
18 # Tailscale fix(not needed, but recommended)
19 firewall.checkReversePath = "loose";
20
21 # DNS Servers
22 # Only use local resolver
23 nameservers = lib.mkForce [ ];
24
25 resolvconf.enable = false;
26 };
27 services.resolved = {
28 enable = false;
29 settings.Resolve = {
30 FallbackDNS = "158.59.252.11";
31 LLMNR = true;
32 MulticastDNS = true;
33 };
34 };
35 systemd.services.wpa_supplicant.environment.OPENSSL_CONF = pkgs.writeText "openssl.cnf" ''
36 openssl_conf = openssl_init
37 [openssl_init]
38 ssl_conf = ssl_sect
39 [ssl_sect]
40 system_default = system_default_sect
41 [system_default_sect]
42 Options = UnsafeLegacyRenegotiation
43 '';
44 services.mullvad-vpn = {
45 enable = false;
46 package = pkgs.mullvad-vpn;
47 };
48}