dnssec

configuration.nix

@@ -38,6 +38,10 @@ in
     '';
   };
 
+  services.dbus.packages = with pkgs; [
+    gsettings-desktop-schemas
+  ];
+
   networking.bridges."lxcbr0".interfaces = [ ];
   networking.interfaces."lxcbr0".ipv4.addresses = [
     {
@@ -57,7 +61,7 @@ in
 
   services.resolved = {
     enable = true;
-    dnssec = "true";
+    dnssec = "allow-downgrade";
   };
   networking.nameservers = [
     "1.1.1.1"
@@ -198,6 +202,8 @@ in
     NIXOS_OZONE_WL = "1";
   };
 
+  programs.dconf.enable = true;
+
   # List packages installed in system profile.
   # You can use https://search.nixos.org/ to find more packages (and options).
   environment.systemPackages = with pkgs; [

hardware-configuration.nix

@@ -48,6 +48,7 @@
     "hid_apple.fnmode" = 2;
     "net.ipv4.ip_unprivileged_port_start" = 80;
     "kernel.split_lock_mitigate" = 0;
+    "fs.inotify.max_user_watches" = 524288;
   };
 
   fileSystems."/" = {

services/x.nix

@@ -1,6 +1,7 @@
 # X display system config
 
-{ pkgs, ... }: {
+{ pkgs, ... }:
+{
   hardware.graphics.enable = true;
   services.xserver.enable = true;
   services.xserver.wacom.enable = true;
@@ -14,7 +15,10 @@
 
   xdg.portal = {
     enable = true;
-    extraPortals = [ pkgs.xdg-desktop-portal-hyprland ];
+    extraPortals = [
+      pkgs.xdg-desktop-portal-hyprland
+      pkgs.xdg-desktop-portal-gtk
+    ];
     config.common.default = "*";
   };