Add resolved when tailscale is enabled so that DNS works properly

modules/nixos/default.nix

@@ -4,6 +4,7 @@
 {
   imports = [
     ./boot.nix
+    ./dev.nix
     ./fonts.nix
     ./gdm.nix
     ./gnomeBoxes.nix

modules/nixos/dev.nix

@@ -0,0 +1,39 @@
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib;
+let
+  cfg = config.modules.dev;
+in
+{
+  config = mkIf cfg.enable {
+    # Runs dynamically linked executables intended for generic Linux (e.g. Python
+    # binaries downloaded by uv) by providing the standard loaders in /lib/*
+    programs.nix-ld = {
+      enable = true;
+      libraries = with pkgs; [
+        zlib
+        zstd
+        stdenv.cc.cc
+        curl
+        openssl
+        attr
+        libssh
+        bzip2
+        libxml2
+        acl
+        libsodium
+        util-linux
+        xz
+        systemd
+        glib
+        libelf
+      ];
+    };
+
+    environment.systemPackages = with pkgs; [ uv ];
+  };
+}

modules/nixos/network.nix

@@ -1,12 +1,19 @@
 {
   host,
+  config,
+  lib,
   pkgs,
   ...
 }:
 {
   networking = {
     hostName = "${host}";
-    networkmanager.enable = true;
+    networkmanager = {
+      enable = true;
+      # resolved is only enabled when tailscale is; pointing NM at a
+      # systemd-resolved that isn't running would break DNS entirely
+      dns = lib.mkIf config.services.resolved.enable "systemd-resolved";
+    };
     wireless.enable = true;
   };
 

modules/nixos/tailscale.nix

@@ -10,5 +10,12 @@ in
 {
   config = mkIf cfg.enable {
     services.tailscale.enable = true;
+
+    # systemd-resolved is needed for tailscale's MagicDNS to work properly
+    services.resolved.enable = true;
+
+    # tailscaled applies its DNS config (split DNS, MagicDNS) to
+    # systemd-resolved over D-Bus, which is polkit-guarded
+    security.polkit.enable = true;
   };
 }

modules/options/default.nix

@@ -5,6 +5,7 @@
   imports = [
     ./discord.nix
     ./dictation.nix
+    ./dev.nix
     ./display.nix
     ./gnomeBoxes.nix
     ./gpg.nix

modules/options/dev.nix

@@ -0,0 +1,10 @@
+{
+  lib,
+  ...
+}:
+with lib;
+{
+  options.modules.dev = {
+    enable = mkEnableOption "Python development with uv and nix-ld";
+  };
+}

profiles/desktop/default.nix

@@ -15,6 +15,8 @@
 
   modules.localsend.enable = true;
 
+  modules.dev.enable = true;
+
   modules.zsh.enable = true;
   modules.shell.defaultShell = "zsh";