2 files changed, 13 insertions, 6 deletions

diff --git a/system-profiles/disko.nix b/system-profiles/disko.nix
new file mode 100644
index 00000000..52e1f003
--- /dev/null
+++ b/system-profiles/disko.nix
@@ -0,0 +1,5 @@
+{ flakeInputs, ... }: {
+  imports = [
+    flakeInputs.disko.nixosModules.disko
+  ];
+}
diff --git a/system-profiles/networkmanager.nix b/system-profiles/networkmanager.nix
index 7ffd688a..3c6cb24e 100644
--- a/system-profiles/networkmanager.nix
+++ b/system-profiles/networkmanager.nix
@@ -1,21 +1,23 @@
-{ config, lib, ... }:
-
-with lib;
-
+{ config, pkgs, lib, ... }:
 {
   config = {
     networking = {
       networkmanager = {
         enable = true;
         dhcp = "internal";
-        dns = mkForce "dnsmasq";
+        dns = lib.mkForce "dnsmasq";
         logLevel = "INFO";
               settings.connectivity.uri = "https://online.yggdrasil.li";
       };
     };
 
+    environment.etc."NetworkManager/dnsmasq.d/dnssec.conf".text = ''
+      conf-file=${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf
+      dnssec
+    '';
+
     systemd.services."NetworkManager-wait-online".enable = false;
-    systemd.services."systemd-networkd-wait-online".enable = mkForce false;
+    systemd.services."systemd-networkd-wait-online".enable = lib.mkForce false;
 
     services.resolved.enable = false;
   };