summaryrefslogtreecommitdiff
path: root/hosts/threshold/network.nix
diff options
context:
space:
mode:
authorJakub Stachurski <j.stachurski@student.utwente.nl>2026-05-08 23:23:19 +0200
committerJakub Stachurski <j.stachurski@student.utwente.nl>2026-05-08 23:23:19 +0200
commitbb957032ffc5352229edbbdcdb56b9dba4408f37 (patch)
tree8d6c171a49aae83dfc191e2aad1ecf55330f0bb4 /hosts/threshold/network.nix
parentad57da6bda1cb00ab11f78125c16daebbf0c221c (diff)
Tacitus hosts and locale
Diffstat (limited to 'hosts/threshold/network.nix')
-rw-r--r--hosts/threshold/network.nix61
1 files changed, 0 insertions, 61 deletions
diff --git a/hosts/threshold/network.nix b/hosts/threshold/network.nix
deleted file mode 100644
index a4d0c03..0000000
--- a/hosts/threshold/network.nix
+++ /dev/null
@@ -1,61 +0,0 @@
-{ ... }:
-let
- baseTCP = [
- 20
- 22
- 25
- 80
- 443
- ];
- baseUDP = [
- ];
- baseTCPRanges = [ ];
- baseUDPRanges = [ ];
-in
-{
- systemd.network = {
- enable = true;
- networks."10-uplink" = {
- matchConfig.Type = "ether";
- networkConfig = {
- DHCP = "ipv4";
- IPv6AcceptRA = "yes";
- };
- linkConfig = {
- RequiredForOnline = "yes";
- };
- ipv6AcceptRAConfig = {
- UseDNS = "yes";
- UseDomains = "yes";
- };
- dns = [
- "192.168.88.1"
- "1.1.1.1"
- "2606:4700:4700:0000:0000:0000:0000:1002"
- ];
- };
- };
- networking = {
- useNetworkd = true;
- nftables.enable = true;
- useDHCP = true;
- firewall = {
- # check enable = true;
- checkReversePath = false;
- allowedTCPPorts = baseTCP;
- allowedUDPPorts = baseUDP;
- allowedUDPPortRanges = baseUDPRanges;
- allowedTCPPortRanges = baseTCPRanges;
- # TODO: Figure out how to do FW that allows only on the internal ip range
- #interfaces = {
- # "wg-home" = {
- # allowedTCPPorts = secureTCP;
- # allowedUDPPorts = secureUDP;
- # allowedUDPPortRanges = secureUDPRanges;
- # allowedTCPPortRanges = secureTCPRanges;
- # };
- #};
- };
- };
-
-}