{ config, pkgs, ... }: { networking.networkmanager.enable = true; networking.extraHosts = '' 192.168.50.217 gitlab.bareksa.com 192.168.50.205 apicurio.prod.bareksa.local 192.168.3.50 kafka.dev.bareksa.local 192.168.3.109 redpanda.dev.bareksa.local kafka-console.dev.bareksa.local ''; networking.firewall = let cfg = config.profile.networking.firewall; in { enable = cfg.enable; allowedTCPPorts = cfg.allowedTCPPorts; allowedUDPPorts = [ 53 ]; }; services.resolved = { enable = true; }; environment.etc."systemd/resolved.conf.d/10-bareksa.conf".source = (pkgs.formats.ini { }).generate "10-bareksa.conf" { Resolve = { # This dns server is only available when VPN is connected. DNS = "192.168.3.215"; Domains = "~bareksa.local"; }; }; }