depot/ops/nixos/frantech-nyc01/default.nix

106 lines
2.3 KiB
Nix
Raw Normal View History

2021-03-19 01:11:37 +00:00
# SPDX-FileCopyrightText: 2020 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0
{ depot, lib, pkgs, rebuilder, config, ... }:
let
inherit (depot.ops) secrets;
2021-07-01 01:48:12 +00:00
machineSecrets = secrets.machineSpecific.frantech-nyc01;
2021-03-19 01:11:37 +00:00
in {
imports = [
../../../third_party/nixpkgs/nixos/modules/profiles/qemu-guest.nix
../lib/low-space.nix
2021-03-20 02:03:23 +00:00
../lib/coredns/default.nix
2021-07-01 01:48:12 +00:00
../lib/bgp.nix
../lib/minotarproxy.nix
2021-03-19 01:11:37 +00:00
];
boot.initrd.availableKernelModules = [
"ata_piix"
"uhci_hcd"
"virtio_pci"
"virtio_scsi"
"sr_mod"
"virtio_blk"
];
boot.kernelModules = [ "kvm-amd" ];
# Use GRUB.
boot.loader.grub.enable = true;
boot.loader.grub.version = 2;
boot.loader.grub.device = "/dev/vda";
powerManagement.cpuFreqGovernor = lib.mkDefault "performance";
fileSystems = {
"/" = {
device = "/dev/vda1";
fsType = "ext4";
};
};
nix.maxJobs = lib.mkDefault 1;
# Networking!
networking = {
hostName = "frantech-nyc01";
2021-03-19 01:11:37 +00:00
domain = "as205479.net";
hostId = "251837df";
nameservers = [
"2001:4860:4860::8888"
"2001:4860:4860::8844"
"8.8.8.8"
"8.8.4.4"
];
useDHCP = false;
defaultGateway = {
address = "199.195.254.1";
interface = "ens3";
};
defaultGateway6 = {
address = "2605:6400:10::1";
interface = "ens3";
};
interfaces.ens3 = {
ipv4.addresses = [{ address = "199.195.254.60"; prefixLength = 24; }];
ipv6.addresses = [{ address = "2605:6400:10:c77::1"; prefixLength = 48; }];
};
};
my.ip.tailscale = "100.99.236.25";
2021-03-19 01:11:37 +00:00
2021-07-01 01:48:12 +00:00
services.lukegbgp = let local = {
asn = 205479;
}; in {
enable = true;
config = {
local = {
routerID = "199.195.254.60";
};
export = {
#v4 = ["92.118.29.0/24"];
2021-07-01 01:48:12 +00:00
};
peering = {
frantech = {
local = local // {
v4 = "199.195.254.60";
v6 = "2605:6400:10:c77::1";
};
remote = {
asn = 53667;
export_community = 4000;
routers = [{
v4 = "169.254.169.179";
v6 = "2605:6400:ffff::2";
multihop = 2;
password = machineSecrets.bgpPassword;
}];
};
};
};
};
};
2021-03-19 01:11:37 +00:00
system.stateVersion = "21.05";
}