modules/nixos/common/default.nix

@@ -1,5 +1,6 @@
 {
   imports = [
+    ./networking.nix
     ./overlays.nix
   ];
 

modules/nixos/common/networking.nix

@@ -0,0 +1,24 @@
+{ inputs, ... }:
+
+{
+  imports = [
+    inputs.servers.nixosModules.pki
+  ];
+
+  services.resolved.enable = true;
+
+  networking.networkmanager.dns = "systemd-resolved";
+  networking.resolvconf.enable = false;
+  networking.dhcpcd.enable = false;
+  networking.search = [
+    "i.sid.ovh"
+    "sid.ovh"
+  ];
+  networking.nameservers = [
+    "100.64.0.6"
+    "1.1.1.1"
+    "8.8.8.8"
+  ];
+
+  services.tailscale.useRoutingFeatures = "client";
+}

modules/nixos/tailscale/default.nix

@@ -11,7 +11,7 @@
         loginServer = "https://hs.sid.ovh";
         authKeyFile = config.sops.secrets."tailscale/personal-key".path;
         enableSSH = true;
-        acceptDNS = true;
+        acceptDNS = false; # use coredns
       };
       work = {
         loginServer = "https://headscale.cryodev.xyz";

users/sid/home/hyprland/packages.nix

@@ -44,7 +44,6 @@ in
       magic-wormhole
       naabu
       ocrmypdf
-      qrencode
       rpi-imager
       rustfmt
       showmethekey