mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

chore: format everything

Browse source
This commit is contained in:
oddlama 2024-11-26 13:34:55 +01:00
parent deca311c68
commit 7ccd7856ee
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
162 changed files with 4750 additions and 3718 deletions
Download patch file Download diff file Expand all files Collapse all files

18
hosts/envoy/net.nix
View file

@ -3,12 +3,14 @@
globals,
lib,
...
}: let
}:
let
icfg = config.repo.secrets.local.networking.interfaces.wan;
in {
in
{
networking.hostId = config.repo.secrets.local.networking.hostId;
networking.domain = globals.mail.primary;
networking.hosts."127.0.0.1" = ["mail.${globals.mail.primary}"];
networking.hosts."127.0.0.1" = [ "mail.${globals.mail.primary}" ];
globals.monitoring.ping.envoy = {
hostv4 = lib.net.cidr.ip icfg.hostCidrv4;
@ -18,7 +20,9 @@ in {
boot.initrd.systemd.network = {
enable = true;
networks = {inherit (config.systemd.network.networks) "10-wan";};
networks = {
inherit (config.systemd.network.networks) "10-wan";
};
};
systemd.network.networks = {
@ -27,9 +31,9 @@ in {
icfg.hostCidrv4
icfg.hostCidrv6
];
gateway = ["fe80::1"];
gateway = [ "fe80::1" ];
routes = [
{Destination = "172.31.1.1";}
{ Destination = "172.31.1.1"; }
{
Gateway = "172.31.1.1";
GatewayOnLink = true;
@ -41,7 +45,7 @@ in {
};
};
networking.nftables.firewall.zones.untrusted.interfaces = ["wan"];
networking.nftables.firewall.zones.untrusted.interfaces = [ "wan" ];
# Allow accessing influx
wireguard.proxy-sentinel.client.via = "sentinel";