mirror of
https://github.com/foo-dogsquared/nixos-config.git
synced 2025-01-31 16:57:55 +00:00
112 lines
3.1 KiB
Nix
112 lines
3.1 KiB
Nix
{ config, lib, pkgs, modulesPath, ... }:
|
|
|
|
# Most of the filesystems listed here are supposed to be overriden to default
|
|
# settings of whatever image format configuration this host system will import
|
|
# from nixos-generators.
|
|
let
|
|
inherit (builtins) toString;
|
|
inherit (import ./networks.nix) interfaces;
|
|
|
|
# This is just referring to the same interface just with alternative names.
|
|
mainEthernetInterfaceNames = [ "ens3" "enp0s3" ];
|
|
internalEthernetInterfaceNames = [ "ens10" "enp0s10" ];
|
|
in
|
|
{
|
|
imports = [
|
|
(modulesPath + "/profiles/qemu-guest.nix")
|
|
];
|
|
|
|
boot.loader.grub.device = "/dev/sda";
|
|
boot.initrd.availableKernelModules = [ "ata_piix" "virtio_pci" "virtio_scsi" "xhci_pci" "sd_mod" "sr_mod" ];
|
|
boot.initrd.kernelModules = [ "nvme" ];
|
|
|
|
fileSystems."/" = {
|
|
label = "nixos";
|
|
fsType = "ext4";
|
|
options = [ "defaults" ];
|
|
};
|
|
|
|
fileSystems."/boot" = {
|
|
label = "boot";
|
|
fsType = "vfat";
|
|
};
|
|
|
|
zramSwap = {
|
|
enable = true;
|
|
numDevices = 1;
|
|
};
|
|
|
|
nixpkgs.hostPlatform = lib.mkDefault "x86_64-linux";
|
|
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
|
|
|
networking = {
|
|
enableIPv6 = true;
|
|
usePredictableInterfaceNames = true;
|
|
useNetworkd = true;
|
|
|
|
# We're using networkd to configure so we're disabling this
|
|
# service.
|
|
useDHCP = false;
|
|
dhcpcd.enable = false;
|
|
};
|
|
|
|
# The local DNS resolver. This should be used in conjunction with an
|
|
# authoritative DNS server as a forwarder. Also, it should live in its
|
|
# default address at 127.0.0.53 (as of systemd v252).
|
|
services.resolved.enable = true;
|
|
|
|
# The interface configuration is based from the following discussion:
|
|
# https://discourse.nixos.org/t/nixos-on-hetzner-cloud-servers-ipv6/221/
|
|
systemd.network = {
|
|
enable = true;
|
|
wait-online.ignoredInterfaces = [ "lo" ];
|
|
|
|
# For more information, you can look at Hetzner documentation from
|
|
# https://docs.hetzner.com/robot/dedicated-server/ip/additional-ip-adresses/
|
|
networks = {
|
|
"10-wan" = with interfaces.main'; {
|
|
matchConfig.Name = lib.concatStringsSep " " mainEthernetInterfaceNames;
|
|
|
|
# Setting up IPv6.
|
|
address = [ "${IPv6.address}/64" ];
|
|
gateway = [ IPv6.gateway ];
|
|
|
|
networkConfig = {
|
|
# IPv6 has to be manually configured.
|
|
DHCP = "ipv4";
|
|
IPForward = true;
|
|
|
|
LinkLocalAddressing = "ipv6";
|
|
IPv6AcceptRA = true;
|
|
|
|
DNS = [
|
|
"2a01:4ff:ff00::add:2"
|
|
"2a01:4ff:ff00::add:1"
|
|
];
|
|
};
|
|
};
|
|
|
|
"20-lan" = with interfaces.internal; {
|
|
matchConfig.Name = lib.concatStringsSep " " internalEthernetInterfaceNames;
|
|
|
|
address = [
|
|
"${IPv4.address}/16"
|
|
"${IPv6.address}/64"
|
|
];
|
|
|
|
# Using the authoritative DNS server to enable accessing them nice
|
|
# internal services with domain names.
|
|
dns = [ "127.0.0.1" "::1" ];
|
|
domains = [ config.networking.fqdn ];
|
|
|
|
gateway = [
|
|
IPv4.gateway
|
|
IPv6.gateway
|
|
];
|
|
|
|
networkConfig.IPv6AcceptRA = true;
|
|
};
|
|
};
|
|
};
|
|
}
|