Initial commit

modules/networking/core/default.nix

@@ -0,0 +1,38 @@
+{ ... }:
+
+{
+  imports = [
+    ./firewall.nix
+  ];
+
+  networking = {
+    networkmanager = {
+      enable = true;
+      dns = "systemd-resolved";
+    };
+    extraHosts = "192.168.1.60 laptop";
+    nftables.enable = true;
+
+    nameservers = [
+      "192.168.1.193" # Pi-hole
+      "1.1.1.1" # Cloudflare
+      "1.0.0.1" # Cloudflare (Secondary)
+    ];
+  };
+
+  services.resolved = {
+    enable = true;
+
+    settings.Resolve = {
+      dnssec = "true";
+      DNSOverTLS = "true";
+      domains = [ "~." ];
+      fallbackDns = [
+        "192.168.1.193" # Pi-hole
+        "1.1.1.1" # Cloudflare
+        "1.0.0.1" # Cloudflare (Secondary)
+      ];
+    };
+
+  };
+}

modules/networking/core/firewall.nix

@@ -0,0 +1,17 @@
+{ ... }:
+
+{
+  networking.firewall = {
+    enable = true;
+
+    allowPing = true;
+
+    allowedTCPPorts = [
+      22
+      80
+    ];
+    allowedUDPPorts = [
+      53
+    ];
+  };
+}