dns: add hw config, set dns server as default, fix firewall rule

common/default.nix

@@ -9,6 +9,7 @@
   networking.firewall.allowedTCPPorts = [ 19999 ];
   services.netdata.enable = true;
 
+  networking.nameservers = [ "2a01:4f8:1c0c:8221::8" "10.42.10.8" ];
   services.qemuGuest.enable = true;
 
   # Select internationalisation properties.

hosts/dns/dns.nix

@@ -1,7 +1,7 @@
 { config, pkgs, lib, ...}:
 
 {
-  networking.firewall.interfaces.ens19.allowedUDPPorts = [ 53 ];
+  networking.firewall.interfaces.ens18.allowedUDPPorts = [ 53 ];
   services.coredns = {
     enable = true;
     config = ''

hosts/dns/hardware-configuration.nix

@@ -0,0 +1,38 @@
+# Do not modify this file!  It was generated by ‘nixos-generate-config’
+# and may be overwritten by future invocations.  Please make changes
+# to /etc/nixos/configuration.nix instead.
+{ config, lib, pkgs, modulesPath, ... }:
+
+{
+  imports =
+    [ (modulesPath + "/profiles/qemu-guest.nix")
+    ];
+
+  boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
+  boot.initrd.kernelModules = [ ];
+  boot.kernelModules = [ "kvm-intel" ];
+  boot.extraModulePackages = [ ];
+
+  fileSystems."/" =
+    { device = "/dev/disk/by-uuid/6f759f18-9d4d-4c2d-aba8-d42fee23bd62";
+      fsType = "ext4";
+    };
+
+  fileSystems."/boot" =
+    { device = "/dev/disk/by-uuid/4B77-61C7";
+      fsType = "vfat";
+    };
+
+  swapDevices =
+    [ { device = "/dev/disk/by-uuid/64b108b1-b7de-41ce-922d-34d63d669e0c"; }
+    ];
+
+  # Enables DHCP on each ethernet and wireless interface. In case of scripted networking
+  # (the default) this is the recommended approach. When using systemd-networkd it's
+  # still possible to use this option, but it's recommended to use it in conjunction
+  # with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
+  networking.useDHCP = lib.mkDefault true;
+  # networking.interfaces.ens18.useDHCP = lib.mkDefault true;
+
+  hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
+}