Install dig and dig.dnsutils

hosts/nullbox/configuration.nix

@@ -12,6 +12,7 @@
       ./hardware-configuration.nix
       # Encryption
       ./luks.nix
+      ./unbound.nix
     ];
 
   config = {

hosts/nullbox/unbound.nix

@@ -0,0 +1,7 @@
+{ pkgs, lib, config, ... }:
+{
+  config = {
+    networking.networkmanager.dns = "none";
+    services.unbound.enable = true;
+  };
+}

system/profile/base.nix

@@ -78,6 +78,8 @@ in
         socat
         nmap
         hping
+        dig
+        dig.dnsutils
 
         # system utilities
         htop