diff options
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/core/default.nix | 2 | ||||
| -rw-r--r-- | modules/core/networking/default.nix | 22 | ||||
| -rw-r--r-- | modules/core/networking/tailscale.nix (renamed from modules/core/tailscale.nix) | 0 | ||||
| -rw-r--r-- | modules/desktop/networking/default.nix | 20 | ||||
| -rw-r--r-- | modules/desktop/software/access/default.nix | 1 | ||||
| -rw-r--r-- | modules/desktop/software/access/mosh.nix | 6 | ||||
| -rw-r--r-- | modules/server/networking/default.nix | 1 |
7 files changed, 24 insertions, 28 deletions
diff --git a/modules/core/default.nix b/modules/core/default.nix index b086a28..a798030 100644 --- a/modules/core/default.nix +++ b/modules/core/default.nix @@ -1,8 +1,8 @@ { imports = [ + ./networking ./nix ./sops.nix - ./tailscale.nix ]; programs.mosh = { diff --git a/modules/core/networking/default.nix b/modules/core/networking/default.nix new file mode 100644 index 0000000..5e53759 --- /dev/null +++ b/modules/core/networking/default.nix @@ -0,0 +1,22 @@ +{ secrets, ... }: +{ + imports = [ ./tailscale.nix ]; + + networking = { + nftables.enable = true; + + nameservers = [ + "45.90.28.0#${secrets.nextdns_id}.dns.nextdns.io" + "2a07:a8c0::#${secrets.nextdns_id}.dns.nextdns.io" + "45.90.30.0#${secrets.nextdns_id}.dns.nextdns.io" + "2a07:a8c1::#${secrets.nextdns_id}.dns.nextdns.io" + ]; + + timeServers = [ + "0.nixos.pool.ntp.org" + "1.nixos.pool.ntp.org" + "2.nixos.pool.ntp.org" + "3.nixos.pool.ntp.org" + ]; + }; +} diff --git a/modules/core/tailscale.nix b/modules/core/networking/tailscale.nix index 0228915..0228915 100644 --- a/modules/core/tailscale.nix +++ b/modules/core/networking/tailscale.nix diff --git a/modules/desktop/networking/default.nix b/modules/desktop/networking/default.nix index 060669a..37267c2 100644 --- a/modules/desktop/networking/default.nix +++ b/modules/desktop/networking/default.nix @@ -1,4 +1,3 @@ -{ secrets, ... }: { imports = [ ./firewall @@ -22,22 +21,5 @@ # https://discourse.nixos.org/t/how-to-disable-networkmanager-wait-online-service-in-the-configuration-file/19963/2 systemd.services.NetworkManager-wait-online.enable = false; - networking = { - hostName = "kansai"; - nftables.enable = true; - - nameservers = [ - "45.90.28.0#${secrets.nextdns_id}.dns.nextdns.io" - "2a07:a8c0::#${secrets.nextdns_id}.dns.nextdns.io" - "45.90.30.0#${secrets.nextdns_id}.dns.nextdns.io" - "2a07:a8c1::#${secrets.nextdns_id}.dns.nextdns.io" - ]; - - timeServers = [ - "0.nixos.pool.ntp.org" - "1.nixos.pool.ntp.org" - "2.nixos.pool.ntp.org" - "3.nixos.pool.ntp.org" - ]; - }; + networking.hostName = "kansai"; } diff --git a/modules/desktop/software/access/default.nix b/modules/desktop/software/access/default.nix index 7db7629..32d5500 100644 --- a/modules/desktop/software/access/default.nix +++ b/modules/desktop/software/access/default.nix @@ -1,7 +1,6 @@ { imports = [ ./gnupg.nix - ./mosh.nix ./ssh.nix ]; } diff --git a/modules/desktop/software/access/mosh.nix b/modules/desktop/software/access/mosh.nix deleted file mode 100644 index c9af5bf..0000000 --- a/modules/desktop/software/access/mosh.nix +++ /dev/null @@ -1,6 +0,0 @@ -{ - programs.mosh = { - enable = true; - openFirewall = false; - }; -} diff --git a/modules/server/networking/default.nix b/modules/server/networking/default.nix index 8f6c1d9..0446118 100644 --- a/modules/server/networking/default.nix +++ b/modules/server/networking/default.nix @@ -9,7 +9,6 @@ networking = { hostName = "himeji"; domain = ""; - nftables.enable = true; firewall = { allowedUDPPorts = [ 53 ]; |