_: {
  # prevent networkmanager from taking dns servers from dhcp (we have provided our own)
  networking.networkmanager.dns = "none";
  networking.nameservers = ["1.1.1.1" "1.0.0.1"];
}