mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

feat: begin zackbiene rework

Browse source
This commit is contained in:
oddlama 2024-05-21 22:55:03 +02:00
parent 6ca8df1c30
commit 4e46105e5e
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
24 changed files with 100 additions and 95 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/ward/default.nix
View file

@ -33,7 +33,7 @@
};
# Connect safely via wireguard to skip authentication
networking.hosts.${nodes.sentinel.config.wireguard.proxy-sentinel.ipv4} = [nodes.sentinel.config.networking.providedDomains.influxdb];
networking.hosts.${config.wireguard.proxy-home.ipv4} = [nodes.sentinel.config.networking.providedDomains.influxdb];
meta.telegraf = {
enable = true;
influxdb2 = {

8
hosts/ward/guests/adguardhome.nix
View file

@ -9,7 +9,7 @@
in {
wireguard.proxy-sentinel = {
client.via = "sentinel";
firewallRuleForNode.sentinel.allowedTCPPorts = [config.services.adguardhome.settings.port];
firewallRuleForNode.sentinel.allowedTCPPorts = [config.services.adguardhome.port];
};
nodes.sentinel = {
@ -17,7 +17,7 @@ in {
services.nginx = {
upstreams.adguardhome = {
servers."${config.wireguard.proxy-sentinel.ipv4}:${toString config.services.adguardhome.settings.port}" = {};
servers."${config.wireguard.proxy-sentinel.ipv4}:${toString config.services.adguardhome.port}" = {};
extraConfig = ''
zone adguardhome 64k;
keepalive 2;
@ -52,9 +52,9 @@ in {
services.adguardhome = {
enable = true;
mutableSettings = false;
host = "0.0.0.0";
port = 3000;
settings = {
host = "0.0.0.0";
port = 3000;
dns = {
# allowed_clients = [
# ];

7
hosts/ward/kea.nix
View file

@ -9,6 +9,13 @@
dnsIp = net.cidr.host 3 lanCidrv4;
webProxyIp = net.cidr.host 4 lanCidrv4;
in {
environment.persistence."/persist".directories = [
{
directory = "/var/lib/private/kea";
mode = "0700";
}
];
# TODO make meta.kea module?
# TODO reserve by default using assignIps algo?
services.kea.dhcp4 = {

3
hosts/ward/net.nix
View file

@ -156,9 +156,6 @@ in {
};
};
# Allow accessing influx
wireguard.proxy-sentinel.client.via = "sentinel";
#wireguard.home.server = {
# host = todo # config.networking.fqdn;
# port = 51192;