os/modules/core/networking.nix

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

90 lines
2.5 KiB
Nix
Raw Normal View History

2021-05-30 19:10:28 +00:00
{
2022-11-22 11:30:54 +00:00
config,
pkgs,
lib,
...
}:
with lib; let
cfg = config.pub-solar.core;
in {
options.pub-solar.core = {
enableCaddy = mkOption {
type = types.bool;
default = !cfg.lite;
};
enableHelp = mkOption {
type = types.bool;
default = !cfg.lite;
};
2021-05-30 19:10:28 +00:00
binaryCaches = mkOption {
type = types.listOf types.str;
2022-11-22 11:30:54 +00:00
default = [];
2021-05-30 19:10:28 +00:00
description = "Binary caches to use.";
};
publicKeys = mkOption {
type = types.listOf types.str;
2022-11-22 11:30:54 +00:00
default = [];
2021-05-30 19:10:28 +00:00
description = "Public keys of binary caches.";
};
};
config = {
# disable NetworkManager and systemd-networkd -wait-online by default
systemd.services.NetworkManager-wait-online.enable = lib.mkDefault false;
systemd.services.systemd-networkd-wait-online.enable = lib.mkDefault false;
2021-05-30 19:10:28 +00:00
networking.networkmanager = {
# Enable networkmanager. REMEMBER to add yourself to group in order to use nm related stuff.
enable = true;
# not as stable as wpa_supplicant yet, also more trouble with 5 GHz networks
#wifi.backend = "iwd";
2021-05-30 19:10:28 +00:00
};
networking.firewall.enable = true;
2021-05-30 19:10:28 +00:00
# Customized binary caches list (with fallback to official binary cache)
2022-11-22 11:30:54 +00:00
nix.settings.substituters = cfg.binaryCaches;
nix.settings.trusted-public-keys = cfg.publicKeys;
2021-05-30 19:10:28 +00:00
# These entries get added to /etc/hosts
networking.hosts = {
2022-11-22 11:30:54 +00:00
"127.0.0.1" =
[]
++ lib.optionals cfg.enableCaddy ["caddy.local"]
++ lib.optionals config.pub-solar.printing.enable ["cups.local"]
++ lib.optionals cfg.enableHelp ["help.local"];
2021-05-30 19:10:28 +00:00
};
# Caddy reverse proxy for local services like cups
services.caddy = {
enable = lib.mkForce cfg.enableCaddy;
globalConfig = lib.mkForce ''
default_bind 127.0.0.1
auto_https off
'';
extraConfig = lib.mkForce (concatStringsSep "\n" [
(lib.optionalString
config.pub-solar.printing.enable
''
cups.local:80 {
request_header Host localhost:631
reverse_proxy unix//run/cups/cups.sock
}
'')
(lib.optionalString
cfg.enableHelp
''
help.local:80 {
root * ${pkgs.psos-docs}/lib/html
# Caddy builds the etag with only the file size & latest modified
# date, which is always 1970-01-01 in the Nix store
header -ETag
file_server
}
'')
2023-05-14 15:36:34 +00:00
]);
2021-05-30 19:10:28 +00:00
};
};
}