From 037bee53a4e719ba3ed4ccc48b3c6a2edc52b883 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Tue, 22 Sep 2026 14:43:25 +0200
Subject: skadhi: initial commit

---
 system-profiles/disko.nix          |  5 +++++
 system-profiles/networkmanager.nix | 14 ++++++++------
 2 files changed, 13 insertions(+), 6 deletions(-)
 create mode 100644 system-profiles/disko.nix

(limited to 'system-profiles')

diff --git a/system-profiles/disko.nix b/system-profiles/disko.nix
new file mode 100644
index 00000000..52e1f003
--- /dev/null
+++ b/system-profiles/disko.nix
@@ -0,0 +1,5 @@
+{ flakeInputs, ... }: {
+  imports = [
+    flakeInputs.disko.nixosModules.disko
+  ];
+}
diff --git a/system-profiles/networkmanager.nix b/system-profiles/networkmanager.nix
index 7ffd688a..3c6cb24e 100644
--- a/system-profiles/networkmanager.nix
+++ b/system-profiles/networkmanager.nix
@@ -1,21 +1,23 @@
-{ config, lib, ... }:
-
-with lib;
-
+{ config, pkgs, lib, ... }:
 {
   config = {
     networking = {
       networkmanager = {
         enable = true;
         dhcp = "internal";
-        dns = mkForce "dnsmasq";
+        dns = lib.mkForce "dnsmasq";
         logLevel = "INFO";
 	      settings.connectivity.uri = "https://online.yggdrasil.li";
       };
     };
 
+    environment.etc."NetworkManager/dnsmasq.d/dnssec.conf".text = ''
+      conf-file=${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf
+      dnssec
+    '';
+
     systemd.services."NetworkManager-wait-online".enable = false;
-    systemd.services."systemd-networkd-wait-online".enable = mkForce false;
+    systemd.services."systemd-networkd-wait-online".enable = lib.mkForce false;
 
     services.resolved.enable = false;
   };
-- 
cgit v1.2.3