diff options
| author | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2026-05-08 23:23:19 +0200 |
|---|---|---|
| committer | Jakub Stachurski <j.stachurski@student.utwente.nl> | 2026-05-08 23:23:19 +0200 |
| commit | bb957032ffc5352229edbbdcdb56b9dba4408f37 (patch) | |
| tree | 8d6c171a49aae83dfc191e2aad1ecf55330f0bb4 /hosts/threshold/network.nix | |
| parent | ad57da6bda1cb00ab11f78125c16daebbf0c221c (diff) | |
Tacitus hosts and locale
Diffstat (limited to 'hosts/threshold/network.nix')
| -rw-r--r-- | hosts/threshold/network.nix | 61 |
1 files changed, 0 insertions, 61 deletions
diff --git a/hosts/threshold/network.nix b/hosts/threshold/network.nix deleted file mode 100644 index a4d0c03..0000000 --- a/hosts/threshold/network.nix +++ /dev/null @@ -1,61 +0,0 @@ -{ ... }: -let - baseTCP = [ - 20 - 22 - 25 - 80 - 443 - ]; - baseUDP = [ - ]; - baseTCPRanges = [ ]; - baseUDPRanges = [ ]; -in -{ - systemd.network = { - enable = true; - networks."10-uplink" = { - matchConfig.Type = "ether"; - networkConfig = { - DHCP = "ipv4"; - IPv6AcceptRA = "yes"; - }; - linkConfig = { - RequiredForOnline = "yes"; - }; - ipv6AcceptRAConfig = { - UseDNS = "yes"; - UseDomains = "yes"; - }; - dns = [ - "192.168.88.1" - "1.1.1.1" - "2606:4700:4700:0000:0000:0000:0000:1002" - ]; - }; - }; - networking = { - useNetworkd = true; - nftables.enable = true; - useDHCP = true; - firewall = { - # check enable = true; - checkReversePath = false; - allowedTCPPorts = baseTCP; - allowedUDPPorts = baseUDP; - allowedUDPPortRanges = baseUDPRanges; - allowedTCPPortRanges = baseTCPRanges; - # TODO: Figure out how to do FW that allows only on the internal ip range - #interfaces = { - # "wg-home" = { - # allowedTCPPorts = secureTCP; - # allowedUDPPorts = secureUDP; - # allowedUDPPortRanges = secureUDPRanges; - # allowedTCPPortRanges = secureTCPRanges; - # }; - #}; - }; - }; - -} |
