forked from pub-solar/infra
40 lines
741 B
Nix
40 lines
741 B
Nix
|
{
|
||
|
|
config,
|
||
|
|
pkgs,
|
||
|
|
flake,
|
||
|
|
...
|
||
|
|
}:
|
||
|
|
{
|
||
|
|
networking = {
|
||
|
|
hostName = "tankstelle";
|
||
|
|
domain = "pub.solar";
|
||
|
|
enableIPv6 = true;
|
||
|
|
defaultGateway = {
|
||
|
|
address = "80.244.242.1";
|
||
|
|
interface = "enp1s0";
|
||
|
|
};
|
||
|
|
defaultGateway6 = {
|
||
|
|
address = "2001:4d88:1ffa:26::1";
|
||
|
|
interface = "enp1s0";
|
||
|
|
};
|
||
|
|
nameservers = [ "95.129.51.51" "80.244.244.244" ];
|
||
|
|
interfaces."enp1s0" = {
|
||
|
|
ipv4.addresses = [
|
||
|
|
{
|
||
|
|
address = "80.244.242.5";
|
||
|
|
prefixLength = 29;
|
||
|
|
}
|
||
|
|
];
|
||
|
|
ipv6.addresses = [
|
||
|
|
{
|
||
|
|
address = "2001:4d88:1ffa:26::5";
|
||
|
|
prefixLength = 64;
|
||
|
|
}
|
||
|
|
];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
# TODO: ssh via wireguard only
|
||
|
|
services.openssh.openFirewall = true;
|
||
|
|
}
|