diff options
| author | Grigory Shipunov | 2023-05-10 12:41:34 +0200 |
|---|---|---|
| committer | Grigory Shipunov | 2023-05-10 12:41:34 +0200 |
| commit | 70934dcf600e176a6464b528f4e7f26df178addd (patch) | |
| tree | 7a78636545bcbfc9bb1361f7aab8633a66d4d75d /hosts/toaster/network.nix | |
| parent | ddccfd94fe70188f9fe89586dcc35d6555c2f27a (diff) | |
Revert "Switch to networkmanager for the desktop"
This reverts commit ce6c882435d4367b75ebc1ecff57f40dfe519271.
Diffstat (limited to 'hosts/toaster/network.nix')
| -rw-r--r-- | hosts/toaster/network.nix | 52 |
1 files changed, 35 insertions, 17 deletions
diff --git a/hosts/toaster/network.nix b/hosts/toaster/network.nix index 8f11b45..26def6b 100644 --- a/hosts/toaster/network.nix +++ b/hosts/toaster/network.nix @@ -4,7 +4,10 @@ networking = { hostName = "toaster"; firewall.enable = true; + networkmanager.enable = false; + useNetworkd = true; wireguard.enable = true; + wireless.iwd.enable = true; }; services.resolved = { @@ -18,22 +21,37 @@ ]; }; - # fixup the rpfilter fucking up the networkmanager wireguard - networking.firewall = { - # if packets are still dropped, they will show up in dmesg - logReversePathDrops = true; - # wireguard trips rpfilter up - extraCommands = '' - ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN - ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN - ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN - ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN - ''; - extraStopCommands = '' - ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true - ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true - ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN || true - ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN || true - ''; + # workaround for networkd waiting for shit + systemd.services.systemd-networkd-wait-online.serviceConfig.ExecStart = [ + "" # clear old command + "${config.systemd.package}/lib/systemd/systemd-networkd-wait-online --any" + ]; + + systemd.network = { + enable = true; + + networks."10-ether" = { + matchConfig.MACAddress = "e8:80:88:2f:c6:70"; + networkConfig = { + DHCP = "yes"; + IPv6AcceptRA = true; + }; + }; + networks."10-dock" = { + matchConfig.Name = "enp5s0f4u1u1"; + networkConfig = { + DHCP = "yes"; + IPv6AcceptRA = true; + }; + dhcpV4Config = { RouteMetric = 666; }; + }; + networks."10-wlan" = { + # matchConfig.MACAddress = "04:7b:cb:2a:aa:8c"; + matchConfig.Name = "wlan0"; + networkConfig = { + DHCP = "yes"; + IPv6AcceptRA = true; + }; + }; }; } |
