diff --git a/modules/nixos/common/default.nix b/modules/nixos/common/default.nix
index 8d52671..2047224 100644
--- a/modules/nixos/common/default.nix
+++ b/modules/nixos/common/default.nix
@@ -1,5 +1,6 @@
 {
   imports = [
+    ./networking.nix
     ./overlays.nix
   ];
 
diff --git a/modules/nixos/common/networking.nix b/modules/nixos/common/networking.nix
new file mode 100644
index 0000000..47a2216
--- /dev/null
+++ b/modules/nixos/common/networking.nix
@@ -0,0 +1,24 @@
+{ inputs, ... }:
+
+{
+  imports = [
+    inputs.servers.nixosModules.pki
+  ];
+
+  services.resolved.enable = true;
+
+  networking.networkmanager.dns = "systemd-resolved";
+  networking.resolvconf.enable = false;
+  networking.dhcpcd.enable = false;
+  networking.search = [
+    "i.sid.ovh"
+    "sid.ovh"
+  ];
+  networking.nameservers = [
+    "100.64.0.6"
+    "1.1.1.1"
+    "8.8.8.8"
+  ];
+
+  services.tailscale.useRoutingFeatures = "client";
+}
diff --git a/modules/nixos/tailscale/default.nix b/modules/nixos/tailscale/default.nix
index d8af7e2..9d2b4f1 100644
--- a/modules/nixos/tailscale/default.nix
+++ b/modules/nixos/tailscale/default.nix
@@ -11,7 +11,7 @@
         loginServer = "https://hs.sid.ovh";
         authKeyFile = config.sops.secrets."tailscale/personal-key".path;
         enableSSH = true;
-        acceptDNS = true;
+        acceptDNS = false; # use coredns
       };
       work = {
         loginServer = "https://headscale.cryodev.xyz";
diff --git a/users/sid/home/hyprland/packages.nix b/users/sid/home/hyprland/packages.nix
index 811a0b0..d512c1f 100644
--- a/users/sid/home/hyprland/packages.nix
+++ b/users/sid/home/hyprland/packages.nix
@@ -44,7 +44,6 @@ in
       magic-wormhole
       naabu
       ocrmypdf
-      qrencode
       rpi-imager
       rustfmt
       showmethekey