kubernauts/iac
Watch
0
0
Fork
You've already forked iac
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

🔥

Browse source
This commit is contained in:
XenGi 2026-08-27 23:35:11 +02:00
commit b2e7fde9ec
Signed by: xengi
SSH key fingerprint: SHA256:dM+fLZGsDvyv6kunjE8bGduL24VsCFB4LEOSdmRHdG0
14 changed files with 131 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

37
hosts/kaede/networking.nix
View file

@ -2,28 +2,41 @@
{
networking = {
hostName = "kaede";
domain = "xengi.de";
search = [ "xengi.de" ];
hostName = "k8s";
domain = "berlin.ccc.de";
search = [ "berlin.ccc.de" ];
useNetworkd = true;
dhcpcd.enable = false;
nftables.enable = true;
useDHCP = false;
nameservers = [
"2606:4700:4700::1111#one.one.one.one"
"2620:fe::fe#dns.quad9.net"
"1.1.1.1#one.one.one.one"
"9.9.9.9#dns.quad9.net"
"2001:678:560:42::1"
];
defaultGateway6 = {
address = "fe80::6eb3:11ff:fe11:8f55";
interface = "eno4";
};
defaultGateway = {
address = "217.115.0.182";
interface = "eno3";
address = "195.160.172.5";
interface = "eno4";
};
interfaces.eno3 = {
ipv6.addresses = [{ address = "2a00:1328:e100:1::6d"; prefixLength = 127; }];
ipv4.addresses = [{ address = "217.115.0.183"; prefixLength = 31; }];
ipv6.addresses = [{ address = "2001:678:560:42::88"; prefixLength = 64; }];
ipv4.addresses = [{ address = "195.160.172.88"; prefixLength = 24; }];
};
firewall.enable = true;
};
services.resolved = {
enable = true;
settings.Resolve = {
DNSOverTLS = "opportunistic";
DNSSEC = "allow-downgrade";
FallbackDNS = [
"2606:4700:4700::1111#one.one.one.one"
"1.1.1.1#one.one.one.one"
];
LLMNR = true;
MulticastDNS = true;
};
};
}