fix(vesuvio): make dns resolution actually work

configs/common.nix

@@ -68,7 +68,7 @@ in {
 
   networking.networkmanager = {
     enable = true;
-    dns = "systemd-resolved";
+    dns = lib.mkDefault "systemd-resolved";
   };
 
   nix = {
@@ -138,10 +138,9 @@ in {
     resolved = {
       enable = lib.mkDefault true;
       dnssec = "allow-downgrade";
-      extraConfig = lib.mkDefault ''
+      dnsovertls = "true";
-        [Resolve]
+      extraConfig = ''
         DNS=1.1.1.1 1.0.0.1
-        DNSOverTLS=yes
       '';
     };
 

systems/vesuvio/default.nix

@@ -1,17 +1,26 @@
-{config, ...}: {
+{
+  pkgs,
+  config,
+  ...
+}: {
   boot.tmp.cleanOnBoot = true;
   zramSwap.enable = true;
 
-  services.openssh.ports = [4269];
+  environment.systemPackages = with pkgs; [dig traceroute];
 
-  services.frp = {
+  services = {
-    enable = true;
+    resolved.enable = false;
-    role = "server";
+    openssh.ports = [4269];
-    settings = {
+
-      bindPort = 7000;
+    frp = {
-      auth = {
+      enable = true;
-        method = "token";
+      role = "server";
-        token = "{{ .Envs.FRP_TOKEN }}";
+      settings = {
+        bindPort = 7000;
+        auth = {
+          method = "token";
+          token = "{{ .Envs.FRP_TOKEN }}";
+        };
       };
     };
   };
@@ -19,13 +28,17 @@
   age.secrets.frpToken.file = ../../secrets/etna/frpToken.age;
   systemd.services.frp.serviceConfig.EnvironmentFile = config.age.secrets.frpToken.path;
 
-  networking.firewall = {
+  networking = {
-    allowedTCPPorts = [22]; # forgejo-ssh
+    networkmanager.dns = "default";
-    allowedTCPPortRanges = [
+
-      {
+    firewall = {
-        from = 6000;
+      allowedTCPPorts = [22]; # forgejo-ssh
-        to = 7000;
+      allowedTCPPortRanges = [
-      }
+        {
-    ];
+          from = 6000;
+          to = 7000;
+        }
+      ];
+    };
   };
 }