Arg that's frustrating...why no NAT?

lib/fudo/hosts.nix

@@ -108,8 +108,9 @@ in {
     networking = {
       hostName = config.instance.hostname;
       nameservers = site.nameservers;
-      defaultGateway = site.gateway-v4;
-      defaultGateway6 = site.gateway-v6;
+      # This will cause a loop on the gateway itself
+      #defaultGateway = site.gateway-v4;
+      #defaultGateway6 = site.gateway-v6;
 
       # Necessary to ensure that Kerberos and Avahi both work. Kerberos needs
       # the fqdn of the host, whereas Avahi wants just the simple hostname.`

lib/fudo/local-network.nix

@@ -112,10 +112,9 @@ in {
           option routers ${cfg.gateway};
           option domain-name-servers ${concatStringsSep " " cfg.dns-servers};
           option domain-name "${cfg.domain}";
-          option domain-search ${
-            join-lines
-            (map (dom: ''"${dom}"'') ([ cfg.domain ] ++ cfg.search-domains))
-          };
+          option domain-search "${
+            concatStringsSep " " ([ cfg.domain ] ++ cfg.search-domains)
+          }";
           range ${ip.networkMinIp cfg.dhcp-dynamic-network} ${
             ip.networkMaxButOneIp cfg.dhcp-dynamic-network
           };