stuebinm
72c16d9e1c
today i woke up to the realisation that there's an extremely obvious way to make these nicer, & then i did exactly that. For some reason I did not think of this when originally removing the dependency to nix-hexchen's evalConfig. unfortunately, this is not /quite/ a no-op. The only actual change is different whitespace in some of the semantically-equivalent coredns-configs that got unified.
26 lines
525 B
Nix
26 lines
525 B
Nix
{ lib, ...}:
|
|
|
|
{
|
|
boot.isContainer = true;
|
|
networking.useDHCP = false;
|
|
users.users.root.hashedPassword = "";
|
|
networking.firewall.enable = false;
|
|
services.coredns = {
|
|
enable = true;
|
|
config = ''
|
|
.:53 {
|
|
forward . 1.1.1.1
|
|
}
|
|
'';
|
|
};
|
|
|
|
# I /suspect/ this is not actually needed.
|
|
# TODO: find spoons to deal with potential breakage, test removing this
|
|
networking.defaultGateway = {
|
|
address = "192.168.100.1";
|
|
interface = "eth0";
|
|
};
|
|
|
|
system.stateVersion = lib.mkDefault "21.05";
|
|
}
|