hosts/tower/network.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

{ config, ... }:
{
  networking = {
    hostName = "tower";
    firewall = {
      checkReversePath = "loose";
      trustedInterfaces = [ "tailscale0" ];
      allowedUDPPorts = [ config.services.tailscale.port ];
    };
    useNetworkd = false;
    useDHCP = false;
  };
  systemd.network = {
    enable = true;
    networks = {
      "10-static" = {
        matchConfig.Name = "eno1";
        address = [ "172.19.96.2/24" ];
        gateway = [ "172.19.96.1" ];
        dns = [
          "1.1.1.1"
          "1.0.0.1"
        ];
        DHCP = "no";
      };
    };
  };

  services.tailscale = {
    enable = true;
    openFirewall = true;
  };
}