0xa/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

gnome config

Browse source
This commit is contained in:
Grigory Shipunov 2023-05-26 15:31:57 +02:00
parent 3a84071a9b
commit b1e438d1ec
Signed by: 0xa
GPG key ID: 91FA5E5BF9AA901C
3 changed files with 18 additions and 37 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
flake.nix
View file

@ -89,7 +89,7 @@
./modules/binary-caches.nix ./modules/binary-caches.nix
./modules/devtools.nix ./modules/devtools.nix
./modules/emacs.nix ./modules/emacs.nix
./modules/sway.nix ./modules/gnome.nix
./modules/gnupg.nix ./modules/gnupg.nix
./modules/mail ./modules/mail
./modules/radio.nix ./modules/radio.nix

1
hosts/toaster/default.nix
View file

@ -4,7 +4,6 @@
./amdgpu-sg-fix.nix ./amdgpu-sg-fix.nix
./hardware-configuration.nix ./hardware-configuration.nix
./irc.nix ./irc.nix
./network-vpns.nix
./network.nix ./network.nix
./secrets.nix ./secrets.nix
./secure-boot.nix ./secure-boot.nix

52
hosts/toaster/network.nix
View file

@ -4,10 +4,7 @@
networking = { networking = {
hostName = "toaster"; hostName = "toaster";
firewall.enable = true; firewall.enable = true;
networkmanager.enable = false;
useNetworkd = true;
wireguard.enable = true; wireguard.enable = true;
wireless.iwd.enable = true;
}; };
services.resolved = { services.resolved = {
@ -21,37 +18,22 @@
]; ];
}; };
# workaround for networkd waiting for shit # fixup the rpfilter fucking up the networkmanager wireguard
systemd.services.systemd-networkd-wait-online.serviceConfig.ExecStart = [ networking.firewall = {
"" # clear old command # if packets are still dropped, they will show up in dmesg
"${config.systemd.package}/lib/systemd/systemd-networkd-wait-online --any" logReversePathDrops = true;
]; # wireguard trips rpfilter up
extraCommands = ''
systemd.network = { ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
enable = true; ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN
networks."10-ether" = { ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN
matchConfig.MACAddress = "e8:80:88:2f:c6:70"; '';
networkConfig = { extraStopCommands = ''
DHCP = "yes"; ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
IPv6AcceptRA = true; ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
}; ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN || true
}; ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN || true
networks."10-dock" = { '';
matchConfig.Name = "enp5s0f4u1u1";
networkConfig = {
DHCP = "yes";
IPv6AcceptRA = true;
};
dhcpV4Config = { RouteMetric = 666; };
};
networks."10-wlan" = {
# matchConfig.MACAddress = "04:7b:cb:2a:aa:8c";
matchConfig.Name = "wlan0";
networkConfig = {
DHCP = "yes";
IPv6AcceptRA = true;
};
};
}; };
} }