patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

feat: immich working

Browse source
This commit is contained in:
Patrick Großmann 2024-01-23 02:06:27 +01:00
parent 50ce3e9d8e
commit 5211471f91
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
3 changed files with 16 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
hosts/desktopnix/net.nix
View file

@ -1,8 +1,4 @@
{
config,
#lib,
...
}: {
{config, ...}: {
networking = {
inherit (config.secrets.secrets.local.networking) hostId;
};
@ -15,35 +11,13 @@
MulticastDNS = true;
};
};
#"01-wlan1" = {
# address = ["192.168.1.2/24"];
# matchConfig.MACAddress = config.secrets.secrets.local.networking.interfaces.wlan01.mac;
# networkConfig = {
# IPv6PrivacyExtensions = "yes";
# MulticastDNS = true;
# };
#};
"01-wlan1" = {
DHCP = "yes";
matchConfig.MACAddress = config.secrets.secrets.local.networking.interfaces.wlan01.mac;
networkConfig = {
IPv6PrivacyExtensions = "yes";
MulticastDNS = true;
};
};
};
#networking.nat = {
# enable = true;
# externalInterface = "lan01";
# internalInterfaces = ["wlan01"];
#};
#networking.firewall.enable = lib.mkForce false;
#hardware.wirelessRegulatoryDatabase = true;
#services.hostapd = {
# enable = true;
# radios.wlan01 = {
# band = "2g";
# countryCode = "DE";
# channel = 8;
# networks.wlan01 = {
# ssid = "patricks ist der tolleeste";
# authentication = {
# saePasswordsFile = lib.writeText "supidupipasswort";
# enableRecommendedPairwiseCiphers = true;
# };
# };
# };
#};
}

4
hosts/patricknix/net.nix
View file

@ -60,7 +60,9 @@
dhcpV6Config.RouteMetric = 10;
};
"01-wlan1" = {
DHCP = "yes";
DHCP = "no";
address = ["192.168.1.6/24"];
gateway = ["192.168.1.2"];
matchConfig.MACAddress = config.secrets.secrets.local.networking.wlan1.mac;
networkConfig = {
IPv6PrivacyExtensions = "yes";

5
modules/services/immich.nix
View file

@ -92,7 +92,10 @@ in {
networking.firewall = {
allowedTCPPorts = [2283];
filterForward = true;
extraForwardRules = "ip saddr ${lib.net.cidr.host config.secrets.secrets.global.net.ips."elisabeth" config.secrets.secrets.global.net.privateSubnet} tcp dport 3001 accept";
extraForwardRules = ''
ip saddr ${lib.net.cidr.host config.secrets.secrets.global.net.ips."elisabeth" config.secrets.secrets.global.net.privateSubnet} tcp dport 3001 accept
iifname "podman1" oifname lan accept
'';
};
systemd.tmpfiles.settings = {
"10-immich" = {