nixos/estuary: Real hardware config

This commit is contained in:
2022-06-17 01:47:51 +01:00
parent 36d81cb656
commit f2e5707c6a
15 changed files with 76 additions and 74 deletions

View File

@@ -58,9 +58,7 @@
waitOnline = "no-carrier";
mac = "52:54:00:15:1a:53";
};
drives = mkMerge ([
installerDisk
] ++ (optionals (!config.my.build.isDevVM) [
drives = mkMerge ([ ] ++ (optionals (!config.my.build.isDevVM) [
(vmLVM "estuary" "esp")
(vmLVM "estuary" "nix")
(vmLVM "estuary" "persist")

View File

@@ -10,12 +10,12 @@
altNames = [ "fw" ];
domain = lib.my.colony.domain;
ipv4 = {
address = "188.141.14.75";
address = "188.141.14.136";
gateway = null;
genPTR = false;
};
ipv6 = {
address = "2a0e:97c0:4d0:bbbf::1";
address = "2a0e:97c0:4d0:cccf::1";
gateway = "fe80::215:17ff:fe4b:494a";
};
};
@@ -67,11 +67,11 @@
systemd.network = {
links = {
"10-wan" = {
matchConfig.MACAddress = "52:54:00:a1:b2:5f";
matchConfig.MACAddress = "d0:50:99:fa:a7:99";
linkConfig.Name = "wan";
};
"10-base" = {
matchConfig.MACAddress = "52:54:00:ab:f1:52";
matchConfig.MACAddress = "52:54:00:15:1a:53";
linkConfig.Name = "base";
};
};
@@ -136,7 +136,7 @@
my = {
#deploy.generate.system.mode = "boot";
secrets.key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhxM5mnguExkcLue47QKk1vA72OoPc3HOqqoHqHHfa1";
secrets.key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF9up7pXu6M/OWCKufTOfSiGcxMUk4VqUe7fLuatNFFA";
server.enable = true;
firewall = {

View File

@@ -7,7 +7,7 @@ let
ptrDots = 2;
reverseZone = "100.10.in-addr.arpa";
ptrDots6 = 17;
reverseZone6 = "b.b.b.0.d.4.0.0.c.7.9.e.0.a.2.ip6.arpa";
reverseZone6 = "c.c.c.0.d.4.0.0.c.7.9.e.0.a.2.ip6.arpa";
authZones = attrNames config.my.pdns.auth.bind.zones;
in