.github/workflows/ci.yml

@@ -130,12 +130,12 @@ jobs:
             deployed_sha=$(git ls-remote "$repo_url" "$branch" | cut -f1)
 
             if [[ "$deployed_sha" == "$expected_sha" ]]; then
-              echo "Deployed $expected_sha"
+              echo "✅ ${{ matrix.server }} deployed $expected_sha"
               exit 0
             fi
 
-            echo "Deployed ${deployed_sha::7}, waiting for ${expected_sha::7}..."
-            sleep 10
+            echo "⏳ ${{ matrix.server }}: deployed ${deployed_sha::7}, waiting for ${expected_sha::7}..."
+            sleep 5
           done
   notify:
     if: always()

README.md

@@ -1 +0,0 @@
-[![CI](https://github.com/SebastianStork/nixos-config/actions/workflows/ci.yml/badge.svg)](https://github.com/SebastianStork/nixos-config/actions/workflows/ci.yml)

modules/nixos/networking/default.nix

@@ -36,13 +36,4 @@ in
       readOnly = true;
     };
   };
-
-  config = {
-    networking = {
-      useNetworkd = true;
-      useDHCP = false;
-    };
-
-    services.resolved.enable = true;
-  };
 }

modules/nixos/networking/underlay.nix

@@ -40,6 +40,11 @@ in
 
   config = lib.mkMerge [
     {
+      networking = {
+        useNetworkd = true;
+        useDHCP = false;
+      };
+
       systemd.network = {
         enable = true;
         networks."10-${cfg.interface}" = {
@@ -54,6 +59,12 @@ in
           };
         };
       };
+
+      services.resolved = {
+        enable = true;
+        dnssec = "allow-downgrade";
+        dnsovertls = "opportunistic";
+      };
     }
 
     (lib.mkIf cfg.wireless.enable {