Luke Granger-Brown
3348c34a96
In this configuration we don't properly support IPv6. So be it, for now.
112 lines
3 KiB
Nix
112 lines
3 KiB
Nix
# SPDX-FileCopyrightText: 2023 Luke Granger-Brown <depot@lukegb.com>
|
|
#
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
{ depot, lib, pkgs, config, modulesPath, ... }:
|
|
|
|
let
|
|
nmFiles = builtins.attrNames (lib.filterAttrs (n: v: v == "regular" && lib.hasSuffix ".nmconnection" n) (builtins.readDir ./networkmanager));
|
|
nmBits = lib.mkMerge (map (filename: {
|
|
"NetworkManager/system-connections/${filename}" = {
|
|
source = ./networkmanager + "/${filename}";
|
|
mode = "0600";
|
|
};
|
|
}) nmFiles);
|
|
|
|
boot-builder = pkgs.callPackage ./boot-builder.nix { };
|
|
populate-boot-builder = pkgs.buildPackages.callPackage ./boot-builder.nix { };
|
|
in
|
|
{
|
|
fileSystems = {
|
|
"/" = { device = "/dev/disk/by-label/NIXOS_SD"; fsType = "ext4"; };
|
|
"/boot" = { device = "/dev/disk/by-label/ESP"; fsType = "vfat"; };
|
|
};
|
|
|
|
boot.kernelPackages = pkgs.linuxPackages_latest;
|
|
boot.kernelParams = [ "console=ttyS0,115200n8" ];
|
|
boot.initrd.kernelModules = [ "phy-mvebu-cp110-utmi" ];
|
|
|
|
boot.kernel.sysctl = {
|
|
"net.ipv4.ip_forward" = "1";
|
|
"net.ipv6.conf.default.forwarding" = "1";
|
|
"net.ipv6.conf.all.forwarding" = "1";
|
|
"net.ipv6.conf.default.accept_ra_from_local" = "1";
|
|
"net.ipv6.conf.all.accept_ra_from_local" = "1";
|
|
};
|
|
|
|
networking = {
|
|
hostName = "kerrigan";
|
|
domain = "as205479.net";
|
|
hostId = "c424eeb8";
|
|
useNetworkd = true;
|
|
nameservers = [
|
|
"2001:4860:4860::8888"
|
|
"2001:4860:4860::8844"
|
|
"8.8.8.8"
|
|
"8.8.4.4"
|
|
];
|
|
interfaces.eth2.useDHCP = true;
|
|
interfaces.enu1u4i10.useDHCP = true;
|
|
firewall.interfaces.br0.allowedTCPPorts = [ 80 ];
|
|
};
|
|
users.users.lukegb.extraGroups = lib.mkAfter [ "networkmanager" ];
|
|
my.systemType = "aarch64-linux";
|
|
|
|
my.ip.tailscale = "100.110.212.70";
|
|
my.ip.tailscale6 = "fd7a:115c:a1e0:ab12:4843:cd96:626e:d446";
|
|
|
|
systemd.network.netdevs.br0 = {
|
|
netdevConfig = {
|
|
Name = "br0";
|
|
Kind = "bridge";
|
|
};
|
|
};
|
|
systemd.network.networks.br0 = {
|
|
matchConfig.Name = "br0";
|
|
networkConfig = {
|
|
Address = [ "10.42.0.1/24" "2a09:a443:ee::1/64" ];
|
|
DHCPServer = true;
|
|
IPv6SendRA = true;
|
|
};
|
|
ipv6Prefixes = [{
|
|
ipv6PrefixConfig = {
|
|
Prefix = "2a09:a443:ee::/64";
|
|
};
|
|
}];
|
|
ipv6RoutePrefixes = [{
|
|
ipv6RoutePrefixConfig = {
|
|
Route = "::/0";
|
|
};
|
|
}];
|
|
dhcpServerConfig = {
|
|
PoolOffset = 100;
|
|
PoolSize = 100;
|
|
};
|
|
};
|
|
systemd.network.networks.links-to-bridge = {
|
|
matchConfig.Name = "lan*";
|
|
networkConfig.Bridge = "br0";
|
|
};
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
libqmi screen minicom conntrack-tools
|
|
];
|
|
|
|
services.caddy = {
|
|
enable = true;
|
|
extraConfig = ''
|
|
10.42.0.1:80 {
|
|
reverse_proxy /mbbstatus http://add-on.ee.co.uk {
|
|
header_up Host add-on.ee.co.uk
|
|
}
|
|
}
|
|
'';
|
|
};
|
|
|
|
boot.loader.efi.canTouchEfiVariables = false;
|
|
boot.loader.systemd-boot.enable = true;
|
|
|
|
systemd.services."systemd-networkd-wait-online".wantedBy = lib.mkForce [];
|
|
|
|
system.stateVersion = "23.05";
|
|
}
|