wink: add nat and coredns to container

This should let it talk to the outside network (i.e. the internet), and
thereby enable the oauth2-proxy to redeem codes to authenticate clients.

hosts/hainich/services/wink.nix

@@ -64,7 +64,14 @@
           };
         };
 
-
+      services.coredns = {
+        enable = true;
+        config = ''
+          .:53 {
+          forward . 1.1.1.1
+          }
+        '';
+      };
     };
   };
 
@@ -75,6 +82,9 @@
     enableACME = true;
   };
 
+  networking.nat.enable = true;
+  networking.nat.internalInterfaces = ["ve-wink"];
+  networking.nat.externalInterface = "enp6s0";
 
 
 }