os/modules/core/networking.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

87 lines
2.3 KiB
Nix
Raw Normal View History

2021-05-30 19:10:28 +00:00
{
2022-11-22 11:30:54 +00:00
config,
pkgs,
lib,
...
}:
with lib; let
cfg = config.pub-solar.core;
in {
options.pub-solar.core = {
enableCaddy = mkOption {
type = types.bool;
default = !cfg.lite;
};
enableHelp = mkOption {
type = types.bool;
default = !cfg.lite;
};
2021-05-30 19:10:28 +00:00
binaryCaches = mkOption {
type = types.listOf types.str;
2022-11-22 11:30:54 +00:00
default = [];
2021-05-30 19:10:28 +00:00
description = "Binary caches to use.";
};
publicKeys = mkOption {
type = types.listOf types.str;
2022-11-22 11:30:54 +00:00
default = [];
2021-05-30 19:10:28 +00:00
description = "Public keys of binary caches.";
};
};
config = {
# disable NetworkManager and systemd-networkd -wait-online by default
systemd.services.NetworkManager-wait-online.enable = lib.mkDefault false;
systemd.services.systemd-networkd-wait-online.enable = lib.mkDefault false;
2021-05-30 19:10:28 +00:00
networking.networkmanager = {
# Enable networkmanager. REMEMBER to add yourself to group in order to use nm related stuff.
enable = true;
# not as stable as wpa_supplicant yet, also more trouble with 5 GHz networks
#wifi.backend = "iwd";
2021-05-30 19:10:28 +00:00
};
networking.firewall.enable = true;
2021-05-30 19:10:28 +00:00
# Customized binary caches list (with fallback to official binary cache)
2022-11-22 11:30:54 +00:00
nix.settings.substituters = cfg.binaryCaches;
nix.settings.trusted-public-keys = cfg.publicKeys;
2021-05-30 19:10:28 +00:00
# These entries get added to /etc/hosts
networking.hosts = {
2022-11-22 11:30:54 +00:00
"127.0.0.1" =
[]
++ lib.optionals cfg.enableCaddy ["caddy.local"]
++ lib.optionals config.pub-solar.printing.enable ["cups.local"]
++ lib.optionals cfg.enableHelp ["help.local"];
2021-05-30 19:10:28 +00:00
};
# Caddy reverse proxy for local services like cups
services.caddy = {
enable = cfg.enableCaddy;
globalConfig = ''
default_bind 127.0.0.1
auto_https off
'';
extraConfig = concatStringsSep "\n" [
(lib.optionalString
config.pub-solar.printing.enable
''
cups.local:80 {
request_header Host localhost:631
reverse_proxy unix//run/cups/cups.sock
}
'')
(lib.optionalString
cfg.enableHelp
''
help.local:80 {
root * ${pkgs.psos-docs}/lib/html
file_server
}
'')
];
2021-05-30 19:10:28 +00:00
};
};
}