stockholm/lass/2configs/retiolum.nix

56 lines
1.2 KiB
Nix
Raw Normal View History

{ config, lib, pkgs, ... }:
{
2015-10-01 20:13:40 +00:00
krebs.iptables = {
tables = {
2017-09-19 09:51:22 +00:00
filter.INPUT.rules = let
tincport = toString config.krebs.build.host.nets.retiolum.tinc.port;
in [
{ predicate = "-p tcp --dport ${tincport}"; target = "ACCEPT"; }
{ predicate = "-p udp --dport ${tincport}"; target = "ACCEPT"; }
];
};
};
krebs.tinc.retiolum = {
enable = true;
connectTo = [
"prism"
"ni"
2022-01-24 16:08:09 +00:00
"eve"
];
2019-05-29 13:40:44 +00:00
extraConfig = ''
2022-05-29 18:05:19 +00:00
AutoConnect = no
${lib.optionalString (config.krebs.build.host.nets.retiolum.via != null) ''
LocalDiscovery = no
''}
2019-05-29 13:40:44 +00:00
'';
2022-12-28 19:39:12 +00:00
tincUp = lib.mkIf config.systemd.network.enable "";
};
systemd.network.networks.retiolum = {
matchConfig.Name = "retiolum";
address = [
"${config.krebs.build.host.nets.retiolum.ip4.addr}/16"
"${config.krebs.build.host.nets.retiolum.ip6.addr}/16"
];
linkConfig = {
MTUBytes = "1377";
RequiredForOnline = "no";
};
networkConfig = {
IgnoreCarrierLoss = "10s";
LinkLocalAddressing = "no";
};
};
2016-03-15 13:00:55 +00:00
nixpkgs.config.packageOverrides = pkgs: {
tinc = pkgs.tinc_pre;
};
environment.systemPackages = [
pkgs.tinc
];
}