diff --git a/nix/nixos-module/network.nix b/nix/nixos-module/network.nix
index cce7499..f1834e5 100644
--- a/nix/nixos-module/network.nix
+++ b/nix/nixos-module/network.nix
@@ -1,6 +1,7 @@
 { hostName, config, lib, pkgs, ... }:
 
 let
+  # pick an address for a net's gateway
   findGw6 = net: gw6:
     let
       inherit (config.site.net.${net}) hosts6;
@@ -17,14 +18,9 @@ in
 {
   networking.firewall.enable = lib.mkDefault false;
 
+  # network configuration
   networking.useDHCP = false;
 
-  networking.useHostResolvConf = false;
-  services.resolved.enable = false;
-  environment.etc."resolv.conf".text = ''
-    nameserver 172.20.73.8 9.9.9.9
-  '';
-
   networking.useNetworkd = true;
   systemd.network = {
     enable = true;
@@ -59,4 +55,11 @@ in
 
         }) config.site.hosts.${hostName}.interfaces;
   };
+
+  # DNS settings
+  networking.useHostResolvConf = false;
+  services.resolved.enable = false;
+  environment.etc."resolv.conf".text = ''
+    nameserver 172.20.73.8 9.9.9.9
+  '';
 }