From bb957032ffc5352229edbbdcdb56b9dba4408f37 Mon Sep 17 00:00:00 2001
From: Jakub Stachurski <j.stachurski@student.utwente.nl>
Date: Fri, 8 May 2026 23:23:19 +0200
Subject: Tacitus hosts and locale

---
 hosts/threshold/network.nix | 61 ---------------------------------------------
 1 file changed, 61 deletions(-)
 delete mode 100644 hosts/threshold/network.nix

(limited to 'hosts/threshold/network.nix')

diff --git a/hosts/threshold/network.nix b/hosts/threshold/network.nix
deleted file mode 100644
index a4d0c03..0000000
--- a/hosts/threshold/network.nix
+++ /dev/null
@@ -1,61 +0,0 @@
-{ ... }:
-let
-  baseTCP = [
-    20
-    22
-    25
-    80
-    443
-  ];
-  baseUDP = [
-  ];
-  baseTCPRanges = [ ];
-  baseUDPRanges = [ ];
-in
-{
-  systemd.network = {
-    enable = true;
-    networks."10-uplink" = {
-      matchConfig.Type = "ether";
-      networkConfig = {
-        DHCP = "ipv4";
-        IPv6AcceptRA = "yes";
-      };
-      linkConfig = {
-        RequiredForOnline = "yes";
-      };
-      ipv6AcceptRAConfig = {
-        UseDNS = "yes";
-        UseDomains = "yes";
-      };
-      dns = [
-        "192.168.88.1"
-        "1.1.1.1"
-        "2606:4700:4700:0000:0000:0000:0000:1002"
-      ];
-    };
-  };
-  networking = {
-    useNetworkd = true;
-    nftables.enable = true;
-    useDHCP = true;
-    firewall = {
-      # check  enable = true;
-      checkReversePath = false;
-      allowedTCPPorts = baseTCP;
-      allowedUDPPorts = baseUDP;
-      allowedUDPPortRanges = baseUDPRanges;
-      allowedTCPPortRanges = baseTCPRanges;
-      # TODO: Figure out how to do FW that allows only on the internal ip range
-      #interfaces = {
-      #  "wg-home" = {
-      #   allowedTCPPorts = secureTCP;
-      #   allowedUDPPorts = secureUDP;
-      #   allowedUDPPortRanges = secureUDPRanges;
-      #   allowedTCPPortRanges = secureTCPRanges;
-      # };
-      #};
-    };
-  };
-
-}
-- 
cgit v1.3.1