modules/system/containers: enable nat for container interfaces

modules/system/containers.nix

@@ -86,11 +86,14 @@ let
           services.openssh.hostKeys = [ ];
           system.stateVersion = lib.mkDefault config.system.stateVersion;
 
-          networking.nameservers = lib.mkDefault [
+          networking = lib.mkDefault {
+            useHostResolvConf = false;
+            nameservers = [
               "1.1.1.1"
               "1.0.0.1"
             ];
           };
+        };
 
         bindMounts = {
           # Pass in host's system key to allow decrypting secrets inside containers