patrick/nix-config
1
1
Fork 0
Code Issues Pull requests Projects Wiki Activity

feat: local unique address for nucnix

Browse source
This commit is contained in:
Patrick 2025-01-03 18:02:05 +01:00
parent 0bf5484e69
commit d6b0a70a6f
Signed by: patrick
GPG key ID: 451F95EFB8BECD0F
2 changed files with 34 additions and 30 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

63
config/services/hostapd.nix
View file

@ -21,36 +21,39 @@
"br-home"
];
hardware.wirelessRegulatoryDatabase = true;
# systemd.network = {
# netdevs."40-br-home" = {
# netdevConfig = {
# Name = "br-home";
# Kind = "bridge";
# };
# };
# networks."10-mv-home" = {
# networkConfig = {
# LinkLocalAddressing = "no";
# IPv6AcceptRA = lib.mkForce false;
# Bridge = "br-home";
# };
# matchConfig.Name = "mv-home";
# DHCP = "no";
# };
# networks."10-home" = {
# matchConfig.Name = "br-home";
# DHCP = "yes";
# };
# networks."40-wifi" = {
# matchConfig.Name = "wlan1";
# networkConfig = {
# LinkLocalAddressing = "no";
# IPv6AcceptRA = lib.mkForce false;
# Bridge = "br-home";
# };
# DHCP = "no";
# };
# };
systemd.network = {
netdevs."40-br-home" = {
netdevConfig = {
Name = "br-home";
Kind = "bridge";
};
};
networks."10-mv-home" = {
networkConfig = {
LinkLocalAddressing = "no";
IPv6AcceptRA = lib.mkForce false;
Bridge = "br-home";
};
address = lib.mkForce [ ];
gateway = lib.mkForce [ ];
DHCP = "no";
};
networks."10-home" = {
matchConfig.Name = "br-home";
DHCP = "no";
address = [ "10.99.10.19/24" ];
gateway = [ "10.99.10.1" ];
};
networks."40-wifi" = {
matchConfig.Name = "wlan1";
networkConfig = {
LinkLocalAddressing = "no";
IPv6AcceptRA = lib.mkForce false;
Bridge = "br-home";
};
DHCP = "no";
};
};
networking.nftables.firewall.zones.wlan.interfaces = [ "wlan1" ];
networking.nftables.firewall.zones.home.interfaces = [ "mv-home" ];

1
hosts/nucnix/net.nix
View file

@ -123,6 +123,7 @@ in
"20-lan-${name}" = {
address = [
(lib.net.cidr.hostCidr 1 cidrv4)
(lib.net.cidr.hostCidr 1 cidrv6)
];
matchConfig.Name = "lan-${name}";
networkConfig = {