0xa/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

toaster works

Browse source
This commit is contained in:
Grisha Shipunov 2025-01-02 16:29:05 +01:00
parent 772af12ffe
commit cd63ec45b8
9 changed files with 290 additions and 148 deletions
Download patch file Download diff file Expand all files Collapse all files

6
hosts/toaster/default.nix
View file

@ -5,10 +5,8 @@
./hardware-configuration.nix
# ./irc.nix
./stateful-network.nix
# ./network.nix
# ./network-vpns.nix
# ./secrets.nix
# ./secure-boot.nix
./secure-boot.nix
./zfs.nix
];
@ -50,6 +48,8 @@
environment.systemPackages = with pkgs; [
# factorio
element-desktop
discord
];
services.emacs.defaultEditor = false;

2
hosts/toaster/secure-boot.nix
View file

@ -4,7 +4,7 @@
loader.systemd-boot.enable = lib.mkForce false;
lanzaboote = {
enable = true;
pkiBundle = "/etc/secureboot";
pkiBundle = "/var/lib/sbctl";
};
};

18
hosts/toaster/stateful-network.nix
View file

@ -18,22 +18,4 @@
];
};
# fixup the rpfilter fucking up the networkmanager wireguard
networking.firewall = {
# if packets are still dropped, they will show up in dmesg
logReversePathDrops = true;
# wireguard trips rpfilter up
extraCommands = ''
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN
'';
extraStopCommands = ''
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN || true
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN || true
'';
};
}