about summary refs log tree commit diff
path: root/guix/system.scm
diff options
context:
space:
mode:
authorNguyễn Gia Phong <mcsinyx@disroot.org>2023-04-11 11:53:57 +0900
committerNguyễn Gia Phong <mcsinyx@disroot.org>2023-04-11 12:01:20 +0900
commitac7c886ebf7f77bbecf46a8cb73622e53cfa3eb5 (patch)
treeded9b08817ad5070048a31014503bf2e85dd5ea7 /guix/system.scm
parent21bc63dfddab4537d36af40b77cd3079d9acae8b (diff)
downloaddotfiles-ac7c886ebf7f77bbecf46a8cb73622e53cfa3eb5.tar.gz
Enable OpenNIC and block clown flare on desktop
Also install a few misc packages
Diffstat (limited to 'guix/system.scm')
-rw-r--r--guix/system.scm14
1 files changed, 5 insertions, 9 deletions
diff --git a/guix/system.scm b/guix/system.scm
index 77d350b..909b25c 100644
--- a/guix/system.scm
+++ b/guix/system.scm
@@ -33,14 +33,9 @@
                (keyboard-layout keyboard-layout)))
            (screen-locker-service (specification->package "slock"))
            polkit-wheel-service
-           (service dnsmasq-service-type
-                    (dnsmasq-configuration
-                      (no-resolv? #t)
-                      (query-servers-in-order? #t)
-                      (servers '("172.104.162.222" ; ns3.sg.dns.opennic.glue
-                                 "84.200.69.80" "84.200.70.40")) ; DNS.WATCH
-                      (cache-size 10000)
-                      (negative-cache? #f)))
+           (service nftables-service-type
+                    (nftables-configuration
+                      (ruleset (local-file "./nftables.conf"))))
            (service static-networking-service-type
                     (list (static-networking
                             (addresses
@@ -51,7 +46,8 @@
                               (list (network-route
                                       (destination "default")
                                       (gateway "192.168.0.1"))))
-                            (name-servers '("127.0.0.1"))))) ; dnsmasq
+                            (name-servers ; ns{4,5}.ca.us.dns.opennic.glue
+                              '("147.182.243.49" "137.184.12.79")))))
            (service avahi-service-type)
            (udisks-service)
            (elogind-service)