Feat: Add Unbound DNS resolver

configuration.nix

@@ -121,6 +121,26 @@
   ];
   # networking.firewall.allowedUDPPorts = [ ... ];
 
+  services.unbound = {
+    enable = true;
+    settings = {
+      server = {
+        interface = [
+          "127.0.0.1"
+          "172.17.0.1"
+        ]; # 172.17.0.1 is docker container network mask
+        verbosity = 1;
+        access-control = [
+          "127.0.0.0/8 allow"
+          "172.17.0.1/16 allow"
+          "192.168.0.0/16 allow"
+        ];
+      };
+    };
+    resolveLocalQueries = true;
+  };
+  services.resolved.enable = false;
+
   # Garbage collection to remove old NixOs iterations
   nix.gc = {
     automatic = true;