profiles/dnscrypt/default.nix

@@ -2,8 +2,10 @@
   networking = {
     nameservers = [ "127.0.0.1" "::1" ];
     resolvconf.useLocalResolver = true;
+    # If using dhcpcd:
+    dhcpcd.extraConfig = "nohook resolv.conf";
     # If using NetworkManager:
-    #    networkmanager.dns = "none";
+    networkmanager.dns = "none";
   };
   services.dnscrypt-proxy2 = {
     enable = true;
@@ -17,7 +19,7 @@
           "https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md"
           "https://download.dnscrypt.info/resolvers-list/v3/public-resolvers.md"
         ];
-        cache_file = "/var/lib/dnscrypt-proxy/public-resolvers.md";
+        cache_file = "/var/lib/dnscrypt-proxy2/public-resolvers.md";
         minisign_key = "RWQf6LRCGA9i53mlYecO4IzT51TGPpvWucNSCh1CBM0QTaLn73Y7GFO3";
       };
     };
@@ -26,8 +28,4 @@
     enable = true;
     bindInterface = false;
   };
-  services.avahi = {
-    enable = true;
-    nssmdns = true;
-  };
 }

profiles/virtualization/default.nix

@@ -5,7 +5,6 @@
   };
 
   virtualisation.libvirtd.enable = true;
-  virtualisation.waydroid.enable = true;
   virtualisation.spiceUSBRedirection.enable = true;
   programs.dconf.enable = true;
   environment.systemPackages = with pkgs; [ virt-manager ];

profiles/workstation/default.nix

@@ -22,5 +22,6 @@
   services.gvfs.enable = true;
   services.udisks2.enable = true;
   services.devmon.enable = true;
+  virtualisation.waydroid.enable = true;
   boot.supportedFilesystems = [ "ntfs" ];
 }

suites/default.nix

@@ -1,6 +1,6 @@
 { profiles, ... }:
 with profiles; rec {
-  base = [ users.root core dns ];
+  base = [ users.root core dnscrypt ];
   workstation = base ++ [ sway develop game profiles.workstation ssh flatpak torrents pwn tor rust virtualization java networkmanager pipewire flatpak peerix tailscale users.mae ];
   desktop = workstation ++ [ amd three_dee ];
   lap = workstation ++ [ laptop bluetooth print ];