diff options
| author | quentin@aristote.fr <quentin@aristote.fr> | 2026-10-10 19:25:10 +0200 |
|---|---|---|
| committer | quentin@aristote.fr <quentin@aristote.fr> | 2026-10-10 19:25:10 +0200 |
| commit | 3d84bbc64acc0cafc8bea96b659c65dda0ee017f (patch) | |
| tree | 6d6e41c4d6156367f074387c0f9285f84e3f65a7 | |
| parent | 62c7fe136542e0af4f7b5e0da77b559ea3d35377 (diff) | |
| download | kerberos-3d84bbc64acc0cafc8bea96b659c65dda0ee017f.tar.gz kerberos-3d84bbc64acc0cafc8bea96b659c65dda0ee017f.tar.bz2 kerberos-3d84bbc64acc0cafc8bea96b659c65dda0ee017f.tar.xz | |
migrate hephaistos out of local network
| -rw-r--r-- | config/networking/services/default.nix | 1 | ||||
| -rw-r--r-- | config/networking/services/mesh.nix | 16 | ||||
| -rw-r--r-- | config/system.nix | 4 |
3 files changed, 19 insertions, 2 deletions
diff --git a/config/networking/services/default.nix b/config/networking/services/default.nix index 12c1a03..181e537 100644 --- a/config/networking/services/default.nix +++ b/config/networking/services/default.nix @@ -7,5 +7,6 @@ ./ifplugd.nix ./igmpproxy.nix ./ppp.nix + ./mesh.nix ]; } diff --git a/config/networking/services/mesh.nix b/config/networking/services/mesh.nix new file mode 100644 index 0000000..c2b6e1e --- /dev/null +++ b/config/networking/services/mesh.nix @@ -0,0 +1,16 @@ +{ ... }: +{ + services.tailscale = { + enable = true; + openFirewall = true; + disableTaildrop = true; + }; + + services.unbound.settings = { + server.domain-insecure = "aristote.mesh"; + forward-zone = { + name = "aristote.mesh."; + forward-addr = "100.100.100.100"; + }; + }; +} diff --git a/config/system.nix b/config/system.nix index 1c2fdf0..d82f47f 100644 --- a/config/system.nix +++ b/config/system.nix @@ -1,11 +1,11 @@ -{...}: { +{ ... }: { personal.system = { flake = "git+file:///etc/nixos/"; autoUpgrade = { enable = true; remoteBuilding = { enable = true; - builder.domain = "local"; + builder.domain = "aristote.mesh"; }; }; }; |