nixdots/system/shared/network.nix

{config, ...}: let
  cfgUser = config.myOptions.system.username;
in {
  networking = {
    firewall.enable = false;

    networkmanager = {
      enable = true;
      dns = "systemd-resolved";
    };
  };

  services.resolved = {
    enable = true;
    fallbackDns = [
      "9.9.9.9"
      "2620:fe::fe"
    ];
  };

  users.extraGroups.networkmanager.members = ["${cfgUser}"];
}