coolneng/zion
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Switch to the operator LAN subnet

Browse Source
This commit is contained in:
coolneng 2025-03-04 17:51:30 +01:00
parent acf5a23ed5
commit 68d7c22549
Signed by: coolneng
GPG Key ID: 9893DA236405AF57
1 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
modules/networking.nix
View File

@ -24,7 +24,7 @@ in
systemd.network.networks."24-home" = { systemd.network.networks."24-home" = {
name = "enp2s0"; name = "enp2s0";
matchConfig.Name = "enp2s0"; matchConfig.Name = "enp2s0";
address = [ "192.168.129.2/23" ]; address = [ "192.168.128.2/23" ];
gateway = [ "192.168.128.1" ]; gateway = [ "192.168.128.1" ];
dns = [ dns = [
"1.1.1.1" "1.1.1.1"
@ -56,6 +56,11 @@ in
wireguard_port # Wireguard wireguard_port # Wireguard
53 # DNS 53 # DNS
]; ];
extraCommands = ''
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o ${
config.systemd.network.networks."24-home".name
} -j MASQUERADE
'';
}; };
# Wireguard setup # Wireguard setup
@ -104,7 +109,7 @@ in
listen-address = [ listen-address = [
"127.0.0.1" "127.0.0.1"
"192.168.129.2" "192.168.128.2"
"10.8.0.1" "10.8.0.1"
]; ];
bind-interfaces = true; bind-interfaces = true;
@ -116,7 +121,7 @@ in
conf-file = "${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf"; conf-file = "${pkgs.dnsmasq}/share/dnsmasq/trust-anchors.conf";
dnssec = false; dnssec = false;
address = "/coolneng.duckdns.org/192.168.129.2"; address = "/coolneng.duckdns.org/192.168.128.2";
}; };
}; };