diff options
| author | quentin@aristote.fr <quentin@aristote.fr> | 2026-10-10 19:25:10 +0200 |
|---|---|---|
| committer | quentin@aristote.fr <quentin@aristote.fr> | 2026-10-10 19:25:10 +0200 |
| commit | 3d84bbc64acc0cafc8bea96b659c65dda0ee017f (patch) | |
| tree | 6d6e41c4d6156367f074387c0f9285f84e3f65a7 /config/networking | |
| parent | 62c7fe136542e0af4f7b5e0da77b559ea3d35377 (diff) | |
| download | kerberos-3d84bbc64acc0cafc8bea96b659c65dda0ee017f.tar.gz kerberos-3d84bbc64acc0cafc8bea96b659c65dda0ee017f.tar.bz2 kerberos-3d84bbc64acc0cafc8bea96b659c65dda0ee017f.tar.xz | |
migrate hephaistos out of local network
Diffstat (limited to 'config/networking')
| -rw-r--r-- | config/networking/services/default.nix | 1 | ||||
| -rw-r--r-- | config/networking/services/mesh.nix | 16 |
2 files changed, 17 insertions, 0 deletions
diff --git a/config/networking/services/default.nix b/config/networking/services/default.nix index 12c1a03..181e537 100644 --- a/config/networking/services/default.nix +++ b/config/networking/services/default.nix @@ -7,5 +7,6 @@ ./ifplugd.nix ./igmpproxy.nix ./ppp.nix + ./mesh.nix ]; } diff --git a/config/networking/services/mesh.nix b/config/networking/services/mesh.nix new file mode 100644 index 0000000..c2b6e1e --- /dev/null +++ b/config/networking/services/mesh.nix @@ -0,0 +1,16 @@ +{ ... }: +{ + services.tailscale = { + enable = true; + openFirewall = true; + disableTaildrop = true; + }; + + services.unbound.settings = { + server.domain-insecure = "aristote.mesh"; + forward-zone = { + name = "aristote.mesh."; + forward-addr = "100.100.100.100"; + }; + }; +} |