mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-11 07:10:39 +02:00
Code Activity

feat: use stage1 systemd (and enable initrd sshd on ward)

Browse source
This commit is contained in:
oddlama 2023-04-24 18:38:03 +02:00
parent 20adc139f8
commit c26b5d3c89
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
6 changed files with 40 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/ward/default.nix
View file

@ -10,7 +10,7 @@
../common/core
../common/hardware/intel.nix
#../common/initrd-ssh.nix
../common/initrd-ssh.nix
../common/efi.nix
../common/zfs.nix
@ -20,7 +20,7 @@
./net.nix
];
boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "sdhci_pci"];
boot.initrd.availableKernelModules = ["xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" "sdhci_pci" "r8169"];
#services.authelia.instances.main = {
# enable = true;

19
hosts/ward/net.nix
View file

@ -11,6 +11,11 @@
in {
networking.hostId = nodeSecrets.networking.hostId;
boot.initrd.systemd.network = {
enable = true;
networks = {inherit (config.systemd.network.networks) "10-wan";};
};
systemd.network.networks = {
"10-lan" = {
address = [net.lan.ipv4cidr net.lan.ipv6cidr];
@ -39,18 +44,8 @@ in {
networking.nftables.firewall = {
zones = lib.mkForce {
lan = {
interfaces = ["lan"];
#ipv4Addresses = [(cidr.canonicalize net.lan.ipv4cidr)];
#ipv6Addresses = [(cidr.canonicalize net.lan.ipv6cidr)];
};
wan = {
interfaces = ["wan"];
# TODO ipv4Addresses = [ net.wan.netv4 ];
# TODO ipv6Addresses = [ net.wan.netv6 ];
#ipv4Addresses = ["192.168.1.0/22"];
#ipv6Addresses = ["fd00::/64"];
};
lan.interfaces = ["lan"];
wan.interfaces = ["wan"];
};
rules = lib.mkForce {