os/core/networking.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27

{ config, lib, ... }:
let
  cfg = config.os.core.network;
in
{
  options.os.core.network.enable = lib.mkEnableOption "system-wide networking setup";
  config = lib.mkIf cfg.enable {
    networking = {
      networkmanager = {
        enable = true;
        wifi = {
          macAddress = "random";
          backend = "iwd";
        };
        ethernet.macAddress = "random";
        dns = "systemd-resolved";
      };
      firewall = {
        enable = false;
        allowedTCPPorts = [ ];
        allowedUDPPorts = [ ];
      };
    };
    services.resolved.enable = true;
    systemd.services."NetworkManager-wait-online".enable = false;
  };
}