Zuckerberg
71baa09bd2
Highlights - No need to update flake for every machine anymore, just add a properties.nix file. - Roles are automatically generated from all machine configurations. - Roles and their secrets automatically are grouped and show up in agenix secrets.nix - Machines and their service configs may now query the properties of all machines. - Machine configuration and secrets are now competely isolated into each machine's directory. - Safety checks to ensure no mixing of luks unlocking secrets and hosts with primary ones. - SSH pubkeys no longer centrally stored but instead per machine where the private key lies for better cleanup.
41 lines
945 B
Nix
41 lines
945 B
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
imports = [
|
|
./hardware-configuration.nix
|
|
./router.nix
|
|
];
|
|
|
|
# https://dataswamp.org/~solene/2022-08-03-nixos-with-live-usb-router.html
|
|
# https://github.com/mdlayher/homelab/blob/391cfc0de06434e4dee0abe2bec7a2f0637345ac/nixos/routnerr-2/configuration.nix
|
|
# https://github.com/skogsbrus/os/blob/master/sys/router.nix
|
|
# http://trac.gateworks.com/wiki/wireless/wifi
|
|
|
|
networking.hostName = "router";
|
|
|
|
system.autoUpgrade.enable = true;
|
|
|
|
services.tailscale.exitNode = true;
|
|
|
|
router.enable = true;
|
|
router.privateSubnet = "192.168.3";
|
|
|
|
services.iperf3.enable = true;
|
|
|
|
# networking.useDHCP = lib.mkForce true;
|
|
|
|
# TODO
|
|
# networking.usePredictableInterfaceNames = true;
|
|
|
|
powerManagement.cpuFreqGovernor = "ondemand";
|
|
|
|
|
|
services.irqbalance.enable = true;
|
|
|
|
# services.miniupnpd = {
|
|
# enable = true;
|
|
# externalInterface = "eth0";
|
|
# internalIPs = [ "br0" ];
|
|
# };
|
|
}
|