summaryrefslogtreecommitdiff
path: root/hosts/toaster/stateful-network.nix
diff options
context:
space:
mode:
authorGrigory Shipunov2023-08-05 20:48:58 +0200
committerGrigory Shipunov2023-08-05 20:51:15 +0200
commit9e5d5bd874850df8090c6b43a09bd6fab74e537c (patch)
tree718ea139ed960358204472ec7e7151c73a37035e /hosts/toaster/stateful-network.nix
parent8b8d90cec49f9af706d0a1fc090c89441943b088 (diff)
retire toaster and remove dead code
Diffstat (limited to 'hosts/toaster/stateful-network.nix')
-rw-r--r--hosts/toaster/stateful-network.nix39
1 files changed, 0 insertions, 39 deletions
diff --git a/hosts/toaster/stateful-network.nix b/hosts/toaster/stateful-network.nix
deleted file mode 100644
index 2bb0e04..0000000
--- a/hosts/toaster/stateful-network.nix
+++ /dev/null
@@ -1,39 +0,0 @@
-{ pkgs, ... }: {
- users.users.grue.extraGroups = [ "networkmanager" ];
-
- networking = {
- hostName = "toaster";
- firewall.enable = true;
- wireguard.enable = true;
- };
-
- services.resolved = {
- enable = true;
- dnssec = "allow-downgrade";
- fallbackDns = [
- "9.9.9.9"
- "2620:fe::fe"
- "149.112.112.112"
- "2620:fe::9"
- ];
- };
-
- # fixup the rpfilter fucking up the networkmanager wireguard
- networking.firewall = {
- # if packets are still dropped, they will show up in dmesg
- logReversePathDrops = true;
- # wireguard trips rpfilter up
- extraCommands = ''
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN
- ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN
- '';
- extraStopCommands = ''
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 51820 -j RETURN || true
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 51820 -j RETURN || true
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1337 -j RETURN || true
- ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1337 -j RETURN || true
- '';
- };
-}