os/profiles/networkmanager/default.nix

{ ... }: {
  imports = [ ../misc/adblocking.nix ];

  networking.networkmanager = {
    enable = true;
    wifi.backend = "iwd";
  };

  networking.nameservers =
    [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];

  networking.wireless.iwd.enable = true;

  services.resolved = {
    enable = true;
    dnssec = "true";
    fallbackDns = [ "1.1.1.1#one.one.one.one" "1.0.0.1#one.one.one.one" ];
    extraConfig = ''
      DNSOverTLS=yes
    '';
  };

}