Compare commits
No commits in common. "f44f8346f4c890aa3e998ff039b6b6898b3f2ea5" and "6271f38fff4058e1e7047e14acfb31b39b9901fa" have entirely different histories.
f44f8346f4
...
6271f38fff
|
@ -92,7 +92,6 @@
|
||||||
fish
|
fish
|
||||||
git
|
git
|
||||||
htop
|
htop
|
||||||
lsof
|
|
||||||
#mongodb
|
#mongodb
|
||||||
neovim
|
neovim
|
||||||
nginx
|
nginx
|
||||||
|
@ -120,7 +119,6 @@
|
||||||
# enable = true;
|
# enable = true;
|
||||||
# enableSSHSupport = true;
|
# enableSSHSupport = true;
|
||||||
# };
|
# };
|
||||||
programs.mosh.enable = true;
|
|
||||||
|
|
||||||
# Make neovim the default editor
|
# Make neovim the default editor
|
||||||
programs.neovim.enable = true;
|
programs.neovim.enable = true;
|
||||||
|
@ -183,12 +181,15 @@
|
||||||
# Enable the OpenSSH daemon.
|
# Enable the OpenSSH daemon.
|
||||||
services.openssh.enable = true;
|
services.openssh.enable = true;
|
||||||
|
|
||||||
# Disable the resolved stub listener, let Pihole do it
|
# Enable radvd for advertising IPv6 local addresses
|
||||||
services.resolved = {
|
#services.radvd.config = ''
|
||||||
extraConfig = ''
|
#interface enp2s0 {
|
||||||
DNSStubListener=no
|
#AdvDefaultLifetime 0;
|
||||||
'';
|
#AdvSendAdvert on;
|
||||||
};
|
#prefix fc00::5/48 { };
|
||||||
|
#};
|
||||||
|
#'';
|
||||||
|
#services.radvd.enable = true;
|
||||||
|
|
||||||
# Set up a samba share for the scanner
|
# Set up a samba share for the scanner
|
||||||
services.samba = {
|
services.samba = {
|
||||||
|
@ -231,7 +232,12 @@
|
||||||
];
|
];
|
||||||
};
|
};
|
||||||
|
|
||||||
networking.useNetworkd = true;
|
#networking.interfaces = {
|
||||||
|
#enp2s0.ipv6.addresses = [{
|
||||||
|
#address = "fc00:0000:000::5";
|
||||||
|
#prefixLength = 48;
|
||||||
|
#}];
|
||||||
|
#};
|
||||||
# Copy the NixOS configuration file and link it from the resulting system
|
# Copy the NixOS configuration file and link it from the resulting system
|
||||||
# (/run/current-system/configuration.nix). This is useful in case you
|
# (/run/current-system/configuration.nix). This is useful in case you
|
||||||
# accidentally delete configuration.nix.
|
# accidentally delete configuration.nix.
|
||||||
|
@ -256,31 +262,6 @@
|
||||||
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
# For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
|
||||||
system.stateVersion = "24.05"; # Did you read the comment?
|
system.stateVersion = "24.05"; # Did you read the comment?
|
||||||
|
|
||||||
systemd.network.enable = true;
|
|
||||||
systemd.network.networks."10-wan" = {
|
|
||||||
matchConfig.Name = "enp2s0";
|
|
||||||
networkConfig = {
|
|
||||||
# start a DHCP Client for IPv4 Addressing/Routing
|
|
||||||
DHCP = "ipv4";
|
|
||||||
# accept Router Advertisements for Stateless IPv6 Autoconfiguraton (SLAAC)
|
|
||||||
IPv6AcceptRA = true;
|
|
||||||
};
|
|
||||||
addresses = [{
|
|
||||||
addressConfig = {
|
|
||||||
Address="fd00::2/64";
|
|
||||||
};
|
|
||||||
} {
|
|
||||||
addressConfig = {
|
|
||||||
Address="::/0";
|
|
||||||
Scope="global";
|
|
||||||
};
|
|
||||||
}];
|
|
||||||
|
|
||||||
|
|
||||||
# make routing on this interface a dependency for network-online.target
|
|
||||||
linkConfig.RequiredForOnline = "routable";
|
|
||||||
};
|
|
||||||
|
|
||||||
systemd.services.scan-uploader = {
|
systemd.services.scan-uploader = {
|
||||||
enable = true;
|
enable = true;
|
||||||
wantedBy = [ "multi-user.target" ];
|
wantedBy = [ "multi-user.target" ];
|
||||||
|
@ -307,12 +288,11 @@
|
||||||
TZ = "America/Phoenix";
|
TZ = "America/Phoenix";
|
||||||
DNSMASQ_LISTENING = "all";
|
DNSMASQ_LISTENING = "all";
|
||||||
};
|
};
|
||||||
extraOptions = ["--network=bridge"];
|
|
||||||
image = "docker.io/pihole/pihole:2024.07.0";
|
image = "docker.io/pihole/pihole:2024.07.0";
|
||||||
ports = [
|
ports = [
|
||||||
"53:53/tcp"
|
"192.168.1.5:53:53/tcp"
|
||||||
"53:53/udp"
|
"192.168.1.5:53:53/udp"
|
||||||
"67:67"
|
"192.168.1.5:67:67"
|
||||||
"127.0.0.1:10000:80"
|
"127.0.0.1:10000:80"
|
||||||
];
|
];
|
||||||
volumes = [
|
volumes = [
|
||||||
|
@ -323,17 +303,6 @@
|
||||||
};
|
};
|
||||||
virtualisation.podman.enable = true;
|
virtualisation.podman.enable = true;
|
||||||
virtualisation.podman.dockerSocket.enable = true;
|
virtualisation.podman.dockerSocket.enable = true;
|
||||||
virtualisation.podman.defaultNetwork.settings = {
|
virtualisation.podman.defaultNetwork.settings.dns_enabled = true;
|
||||||
dns_enabled = false;
|
|
||||||
ipv6_enabled = true;
|
|
||||||
subnets = [{
|
|
||||||
gateway = "10.88.0.1";
|
|
||||||
subnet = "10.88.0.0/16";
|
|
||||||
}
|
|
||||||
{
|
|
||||||
gateway = "fd00::1:8:1";
|
|
||||||
subnet = "fd00::1:8:0/122";
|
|
||||||
}];
|
|
||||||
};
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue