feat: prevent dns leaks

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

hosts/servers/hosting-02.nix

@@ -23,6 +23,7 @@
     publicKey = "KkShcqgwbkX2A9n1hhST6qu+m3ldxdJ2Lx8Eiw6mdXw=";
     endpoint = "146.70.117.226:51820";
     privateKeyFile = config.sops.secrets.wireguardKey.path;
+    dns = "10.64.0.1";
   };
 
   services.storagebox = {

modules/nixos/namespaced-vpn.nix

@@ -47,6 +47,11 @@ in
       type = types.str;
       default = "10.10.10.2/30";
     };
+
+    dns = mkOption {
+      type = types.str;
+      default = "9.9.9.9";
+    };
   };
 
   config = mkIf cfg.enable {
@@ -138,5 +143,10 @@ in
       };
     };
 
+    environment.etc."netns/${cfg.namespace}/resolv.conf" = {
+      text = ''
+        nameserver ${cfg.dns}
+      '';
+    };
   };
 }