49 lines
999 B
Nix
49 lines
999 B
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
{
|
|
# Set hostname, hostid and enable WiFi
|
|
networking = {
|
|
hostName = "panacea";
|
|
hostId = "8feb0bb8";
|
|
wireless.iwd.enable = true;
|
|
enableIPv6 = false;
|
|
};
|
|
|
|
# Enable zeroconf
|
|
services.avahi = {
|
|
enable = true;
|
|
nssmdns = true;
|
|
};
|
|
|
|
# Wireguard setup
|
|
networking.wg-quick.interfaces = {
|
|
home = {
|
|
address = [ "10.8.0.2/32" ];
|
|
privateKeyFile = config.age.secrets.wireguard.path;
|
|
dns = [ "10.8.0.1" ];
|
|
peers = [
|
|
# zion
|
|
{
|
|
publicKey = "GN8lqPBZYOulh6xD4GhkoEWI65HMMCpSxJSH5871YnU=";
|
|
allowedIPs = [ "0.0.0.0/0" ];
|
|
endpoint = "coolneng.duckdns.org:1194";
|
|
}
|
|
];
|
|
};
|
|
};
|
|
|
|
# Enable localhost SSH
|
|
services.openssh = {
|
|
enable = true;
|
|
permitRootLogin = "yes";
|
|
passwordAuthentication = false;
|
|
openFirewall = false;
|
|
startWhenNeeded = true;
|
|
};
|
|
|
|
# Firewall configuration
|
|
networking.firewall.allowedTCPPorts = [
|
|
9090 # Calibre
|
|
];
|
|
}
|