add firewall for resolved

hosts/fw.cloonar.com/modules/firewall.nix

@@ -136,11 +136,12 @@
               "lan",
               "server",
               "vserver",
+              "podman1",
               "infrastructure",
               "wg_cloonar",
               "smart",
               "multimedia"
-            } udp dport { 67, 68 } counter accept
+            } udp dport { 53, 67, 68 } counter accept
 
             # Accept mDNS for avahi reflection
             # iifname "multimedia" ip saddr <chromecast IP> tcp dport { llmnr } counter accept

hosts/fw.cloonar.com/modules/networking.nix

@@ -20,6 +20,16 @@
     };
   };
 
+  services.resolved = {
+    enable = true;
+    # dnssec = "true";
+    domains = [ "~." ];
+    fallbackDns = [ "10.42.97.10" ];
+    # extraConfig = ''
+    #   DNSOverTLS=yes
+    # '';
+  };
+
   networking = {
     useDHCP = false;
     # Define VLANS