···

       
9
       
 
       
  # /var/lib/misc is for dnsmasq.leases.

     

       
10
       
 
       
  stateDirs = "/var/lib/NetworkManager /var/lib/dhclient /var/lib/misc";

     

       
11
       
 
       


     

       
12
       
-
       
  dns =

     

       
13
       
-
       
    if cfg.dns == "none" then "none"

     

       
14
       
-
       
    else if cfg.dns == "dnsmasq" then "dnsmasq"

     

       
15
       
-
       
    else if config.services.resolved.enable then "systemd-resolved"

     

       
16
       
-
       
    else if config.services.unbound.enable then "unbound"

     

       
17
       
-
       
    else "default";

     

       
18
       
-
       


     

       
19
       
 
       
  configFile = writeText "NetworkManager.conf" ''

     

       
20
       
 
       
    [main]

     

       
21
       
 
       
    plugins=keyfile

     

       
22
       
 
       
    dhcp=${cfg.dhcp}

     

       
23
       
-
       
    dns=${dns}

     

       
24
       
 
       


     

       
25
       
 
       
    [keyfile]

     

       
26
       
 
       
    ${optionalString (cfg.unmanaged != [])

     
···

       
217
       
 
       
      };

     

       
218
       
 
       


     

       
219
       
 
       
      dns = mkOption {

     

       
220
       
-
       
        type = types.enum [ "auto" "dnsmasq" "none" ];

     

       
221
       
-
       
        default = "auto";

     

       
222
       
 
       
        description = ''

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
223
       
 
       
          Options:

     

       
224
       
-
       
            - auto: Check for systemd-resolved, unbound, or use default.

     

       
225
       
-
       
            - dnsmasq:

     

       
226
       
-
       
              Enable NetworkManager's dnsmasq integration. NetworkManager will run

     

       
227
       
-
       
              dnsmasq as a local caching nameserver, using a "split DNS"

     

       
228
       
-
       
              configuration if you are connected to a VPN, and then update

     

       
229
       
-
       
              resolv.conf to point to the local nameserver.

     

       
230
       
-
       
            - none:

     

       
231
       
-
       
              Disable NetworkManager's DNS integration completely.

     

       
232
       
-
       
              It will not touch your /etc/resolv.conf.

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
233
       
 
       
        '';

     

       
234
       
 
       
      };

     

       
235
       
 
       


     

···

       
9
       
 
       
  # /var/lib/misc is for dnsmasq.leases.

     

       
10
       
 
       
  stateDirs = "/var/lib/NetworkManager /var/lib/dhclient /var/lib/misc";

     

       
11
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
12
       
 
       
  configFile = writeText "NetworkManager.conf" ''

     

       
13
       
 
       
    [main]

     

       
14
       
 
       
    plugins=keyfile

     

       
15
       
 
       
    dhcp=${cfg.dhcp}

     

       
16
       
+
       
    dns=${cfg.dns}

     

       
17
       
 
       


     

       
18
       
 
       
    [keyfile]

     

       
19
       
 
       
    ${optionalString (cfg.unmanaged != [])

     
···

       
210
       
 
       
      };

     

       
211
       
 
       


     

       
212
       
 
       
      dns = mkOption {

     

       
213
       
+
       
        type = types.enum [ "default" "dnsmasq" "unbound" "systemd-resolved" "none" ];

     

       
214
       
+
       
        default = "default";

     

       
215
       
 
       
        description = ''

     

       
216
       
+
       
          Set the DNS (<literal>resolv.conf</literal>) processing mode.

     

       
217
       
+
       
          </para>

     

       
218
       
+
       
          <para>

     

       
219
       
 
       
          Options:

     

       
220
       
+
       
          <variablelist>

     

       
221
       
+
       
          <varlistentry>

     

       
222
       
+
       
            <term><literal>"default"</literal></term>

     

       
223
       
+
       
            <listitem><para>

     

       
224
       
+
       
              NetworkManager will update <literal>/etc/resolv.conf</literal> to

     

       
225
       
+
       
              reflect the nameservers provided by currently active connections.

     

       
226
       
+
       
            </para></listitem>

     

       
227
       
+
       
          </varlistentry>

     

       
228
       
+
       
          <varlistentry>

     

       
229
       
+
       
            <term><literal>"dnsmasq"</literal></term>

     

       
230
       
+
       
            <listitem>

     

       
231
       
+
       
              <para>

     

       
232
       
+
       
                Enable NetworkManager's dnsmasq integration. NetworkManager will

     

       
233
       
+
       
                run dnsmasq as a local caching nameserver, using a "split DNS"

     

       
234
       
+
       
                configuration if you are connected to a VPN, and then update

     

       
235
       
+
       
                <literal>resolv.conf</literal> to point to the local nameserver.

     

       
236
       
+
       
              </para>

     

       
237
       
+
       
              <para>

     

       
238
       
+
       
                It is possible to pass custom options to the dnsmasq instance by

     

       
239
       
+
       
                adding them to files in the

     

       
240
       
+
       
                <literal>/etc/NetworkManager/dnsmasq.d/</literal> directory.

     

       
241
       
+
       
              </para>

     

       
242
       
+
       
              <para>

     

       
243
       
+
       
                When multiple upstream servers are available, dnsmasq will

     

       
244
       
+
       
                initially contact them in parallel and then use the fastest to

     

       
245
       
+
       
                respond, probing again other servers after some time.  This

     

       
246
       
+
       
                behavior can be modified passing the

     

       
247
       
+
       
                <literal>all-servers</literal> or <literal>strict-order</literal>

     

       
248
       
+
       
                options to dnsmasq (see the manual page for more details).

     

       
249
       
+
       
              </para>

     

       
250
       
+
       
              <para>

     

       
251
       
+
       
                Note that this option causes NetworkManager to launch and manage

     

       
252
       
+
       
                its own instance of the dnsmasq daemon, which is

     

       
253
       
+
       
                <emphasis>not</emphasis> the same as setting

     

       
254
       
+
       
                <literal>services.dnsmasq.enable = true;</literal>.

     

       
255
       
+
       
              </para>

     

       
256
       
+
       
            </listitem>

     

       
257
       
+
       
          </varlistentry>

     

       
258
       
+
       
          <varlistentry>

     

       
259
       
+
       
            <term><literal>"unbound"</literal></term>

     

       
260
       
+
       
            <listitem><para>

     

       
261
       
+
       
              NetworkManager will talk to unbound and dnssec-triggerd,

     

       
262
       
+
       
              providing a "split DNS" configuration with DNSSEC support.

     

       
263
       
+
       
              <literal>/etc/resolv.conf</literal> will be managed by

     

       
264
       
+
       
              dnssec-trigger daemon.

     

       
265
       
+
       
            </para></listitem>

     

       
266
       
+
       
          </varlistentry>

     

       
267
       
+
       
          <varlistentry>

     

       
268
       
+
       
            <term><literal>"systemd-resolved"</literal></term>

     

       
269
       
+
       
            <listitem><para>

     

       
270
       
+
       
              NetworkManager will push the DNS configuration to systemd-resolved.

     

       
271
       
+
       
            </para></listitem>

     

       
272
       
+
       
          </varlistentry>

     

       
273
       
+
       
          <varlistentry>

     

       
274
       
+
       
            <term><literal>"none"</literal></term>

     

       
275
       
+
       
            <listitem><para>

     

       
276
       
+
       
              NetworkManager will not modify resolv.conf.

     

       
277
       
+
       
            </para></listitem>

     

       
278
       
+
       
          </varlistentry>

     

       
279
       
+
       
          </variablelist>

     

       
280
       
 
       
        '';

     

       
281
       
 
       
      };

     

       
282
       
 
       


     

···

       
131
       
 
       
      };

     

       
132
       
 
       
    };

     

       
133
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
134
       
 
       
  };

     

       
135
       
 
       


     

       
136
       
 
       
}

     

···

       
131
       
 
       
      };

     

       
132
       
 
       
    };

     

       
133
       
 
       


     

       
134
       
+
       
    # If networkmanager is enabled, ask it to interface with unbound.

     

       
135
       
+
       
    networking.networkmanager.dns = "unbound";

     

       
136
       
+
       


     

       
137
       
 
       
  };

     

       
138
       
 
       


     

       
139
       
 
       
}

     

···

       
147
       
 
       
      ${config.services.resolved.extraConfig}

     

       
148
       
 
       
    '';

     

       
149
       
 
       


     

       
0
       
 
       

     

       
0
       
 
       

     

       
150
       
 
       
  };

     

       
151
       
 
       


     

       
152
       
 
       
}

     

···

       
147
       
 
       
      ${config.services.resolved.extraConfig}

     

       
148
       
 
       
    '';

     

       
149
       
 
       


     

       
150
       
+
       
    # If networkmanager is enabled, ask it to interface with resolved.

     

       
151
       
+
       
    networking.networkmanager.dns = "systemd-resolved";

     

       
152
       
 
       
  };

     

       
153
       
 
       


     

       
154
       
 
       
}