patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

feat: immich working

Browse source
This commit is contained in:
Patrick Großmann 2024-01-23 02:06:27 +01:00
parent 50ce3e9d8e
commit 5211471f91
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
3 changed files with 16 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
hosts/desktopnix/net.nix
View file

@ -1,8 +1,4 @@
{ {config, ...}: {
config,
#lib,
...
}: {
networking = { networking = {
inherit (config.secrets.secrets.local.networking) hostId; inherit (config.secrets.secrets.local.networking) hostId;
}; };
@ -15,35 +11,13 @@
MulticastDNS = true; MulticastDNS = true;
}; };
}; };
#"01-wlan1" = { "01-wlan1" = {
# address = ["192.168.1.2/24"]; DHCP = "yes";
# matchConfig.MACAddress = config.secrets.secrets.local.networking.interfaces.wlan01.mac; matchConfig.MACAddress = config.secrets.secrets.local.networking.interfaces.wlan01.mac;
# networkConfig = { networkConfig = {
# IPv6PrivacyExtensions = "yes"; IPv6PrivacyExtensions = "yes";
# MulticastDNS = true; MulticastDNS = true;
# }; };
#}; };
}; };
#networking.nat = {
# enable = true;
# externalInterface = "lan01";
# internalInterfaces = ["wlan01"];
#};
#networking.firewall.enable = lib.mkForce false;
#hardware.wirelessRegulatoryDatabase = true;
#services.hostapd = {
# enable = true;
# radios.wlan01 = {
# band = "2g";
# countryCode = "DE";
# channel = 8;
# networks.wlan01 = {
# ssid = "patricks ist der tolleeste";
# authentication = {
# saePasswordsFile = lib.writeText "supidupipasswort";
# enableRecommendedPairwiseCiphers = true;
# };
# };
# };
#};
} }

4
hosts/patricknix/net.nix
View file

@ -60,7 +60,9 @@
dhcpV6Config.RouteMetric = 10; dhcpV6Config.RouteMetric = 10;
}; };
"01-wlan1" = { "01-wlan1" = {
DHCP = "yes"; DHCP = "no";
address = ["192.168.1.6/24"];
gateway = ["192.168.1.2"];
matchConfig.MACAddress = config.secrets.secrets.local.networking.wlan1.mac; matchConfig.MACAddress = config.secrets.secrets.local.networking.wlan1.mac;
networkConfig = { networkConfig = {
IPv6PrivacyExtensions = "yes"; IPv6PrivacyExtensions = "yes";

5
modules/services/immich.nix
View file

@ -92,7 +92,10 @@ in {
networking.firewall = { networking.firewall = {
allowedTCPPorts = [2283]; allowedTCPPorts = [2283];
filterForward = true; filterForward = true;
extraForwardRules = "ip saddr ${lib.net.cidr.host config.secrets.secrets.global.net.ips."elisabeth" config.secrets.secrets.global.net.privateSubnet} tcp dport 3001 accept"; extraForwardRules = ''
ip saddr ${lib.net.cidr.host config.secrets.secrets.global.net.ips."elisabeth" config.secrets.secrets.global.net.privateSubnet} tcp dport 3001 accept
iifname "podman1" oifname lan accept
'';
}; };
systemd.tmpfiles.settings = { systemd.tmpfiles.settings = {
"10-immich" = { "10-immich" = {