90 lines
2 KiB
Nix
90 lines
2 KiB
Nix
{ pkgs, ... }:
|
|
|
|
{
|
|
config = {
|
|
environment = {
|
|
etc."nixos/tailscale-authkey".text = ''
|
|
tskey-auth-k1tfJLTnGB11CNTRL-HhnegtfNzQ3G8h71SC2DR38PFXwseQiu
|
|
'';
|
|
|
|
systemPackages = with pkgs; [
|
|
ethtool
|
|
];
|
|
};
|
|
|
|
homelab = {
|
|
apps = {
|
|
speedtest.enable = true;
|
|
technitiumDNS.enable = true;
|
|
traefik.enable = true;
|
|
};
|
|
virtualisation.guest.enable = true;
|
|
};
|
|
|
|
networking = {
|
|
hostName = "Binnenpost";
|
|
hostId = "aaaa1001";
|
|
domain = "depeuter.dev";
|
|
|
|
useDHCP = false;
|
|
|
|
enableIPv6 = true;
|
|
|
|
defaultGateway = {
|
|
address = "192.168.0.1";
|
|
interface = "ens18";
|
|
};
|
|
|
|
# Open ports in the firewall.
|
|
firewall = {
|
|
enable = true;
|
|
};
|
|
|
|
interfaces.ens18 = {
|
|
ipv4.addresses = [
|
|
{
|
|
address = "192.168.0.89";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
};
|
|
|
|
nameservers = [
|
|
"1.1.1.1" # Cloudflare
|
|
"1.0.0.1" # Cloudflare
|
|
];
|
|
};
|
|
|
|
services = {
|
|
networkd-dispatcher = {
|
|
enable = true;
|
|
rules."50-tailscale" = {
|
|
onState = ["routable"];
|
|
script = ''
|
|
${pkgs.ethtool}/bin/ethtool -K ens18 rx-udp-gro-forwarding on rx-gro-list off
|
|
'';
|
|
};
|
|
};
|
|
|
|
tailscale = {
|
|
enable = true;
|
|
useRoutingFeatures = "server";
|
|
authKeyFile = "/etc/nixos/tailscale-authkey";
|
|
extraUpFlags = [
|
|
"--advertise-routes=192.168.0.0/24"
|
|
"--exit-node"
|
|
];
|
|
};
|
|
};
|
|
|
|
virtualisation.oci-containers.containers.traefik.labels = {
|
|
"traefik.http.routers.roxanne.rule" = "Host(`roxanne.depeuter.dev`)";
|
|
"traefik.http.services.roxanne.loadbalancer.server.url" = "https://192.168.0.13:8006";
|
|
|
|
"traefik.http.routers.hugo.rule" = "Host(`hugo.depeuter.dev`)";
|
|
"traefik.http.services.hugo.loadbalancer.server.url" = "https://192.168.0.11:444";
|
|
};
|
|
|
|
system.stateVersion = "24.05";
|
|
};
|
|
}
|