hosts/fw.cloonar.com/modules/dhcp4.nix

@@ -39,7 +39,7 @@
             }
             {
               name = "domain-name-servers";
-              data = "10.42.97.2";
+              data = "10.42.96.1";
             }
           ];
           reservations = [
@@ -79,7 +79,7 @@
             }
             {
               name = "domain-name-servers";
-              data = "10.42.97.2";
+              data = "10.42.97.1";
             }
           ];
           reservations = [
@@ -104,7 +104,7 @@
             }
             {
               name = "domain-name-servers";
-              data = "10.42.97.2";
+              data = "10.42.101.1";
             }
           ];
           reservations = [
@@ -139,7 +139,7 @@
             }
             {
               name = "domain-name-servers";
-              data = "10.42.97.2";
+              data = "10.42.99.1";
             }
           ];
         }

hosts/fw.cloonar.com/modules/networking.nix

@@ -23,7 +23,7 @@
 
   networking = {
     useDHCP = false;
-    nameservers = [ "10.42.97.2" ];
+    nameservers = [ "9.9.9.9" "149.112.112.112" ];
     # Define VLANS
     vlans = {
       infrastructure = {

hosts/fw.cloonar.com/modules/unbound.nix

@@ -130,6 +130,17 @@ let
     ];
   };
 in {
+  services.unbound = {
+    enable = true;
+    settings = cfg // {
+      server.tls-cert-bundle = "/var/lib/acme/fw.cloonnar.com/fullchain.pem";
+    }; 
+  };
+  security.acme.certs."fw.cloonar.com" = {
+    domain = "fw.cloonar.com";
+    group = "unbound";
+  };
+
   security.acme.certs."${domain}" = {
     domain = "${domain}";
     group = "996";