nixos/estuary: Real hardware config
This commit is contained in:
@@ -10,12 +10,12 @@
|
||||
altNames = [ "fw" ];
|
||||
domain = lib.my.colony.domain;
|
||||
ipv4 = {
|
||||
address = "188.141.14.75";
|
||||
address = "188.141.14.136";
|
||||
gateway = null;
|
||||
genPTR = false;
|
||||
};
|
||||
ipv6 = {
|
||||
address = "2a0e:97c0:4d0:bbbf::1";
|
||||
address = "2a0e:97c0:4d0:cccf::1";
|
||||
gateway = "fe80::215:17ff:fe4b:494a";
|
||||
};
|
||||
};
|
||||
@@ -67,11 +67,11 @@
|
||||
systemd.network = {
|
||||
links = {
|
||||
"10-wan" = {
|
||||
matchConfig.MACAddress = "52:54:00:a1:b2:5f";
|
||||
matchConfig.MACAddress = "d0:50:99:fa:a7:99";
|
||||
linkConfig.Name = "wan";
|
||||
};
|
||||
"10-base" = {
|
||||
matchConfig.MACAddress = "52:54:00:ab:f1:52";
|
||||
matchConfig.MACAddress = "52:54:00:15:1a:53";
|
||||
linkConfig.Name = "base";
|
||||
};
|
||||
};
|
||||
@@ -136,7 +136,7 @@
|
||||
|
||||
my = {
|
||||
#deploy.generate.system.mode = "boot";
|
||||
secrets.key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPhxM5mnguExkcLue47QKk1vA72OoPc3HOqqoHqHHfa1";
|
||||
secrets.key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIF9up7pXu6M/OWCKufTOfSiGcxMUk4VqUe7fLuatNFFA";
|
||||
server.enable = true;
|
||||
|
||||
firewall = {
|
||||
|
@@ -7,7 +7,7 @@ let
|
||||
ptrDots = 2;
|
||||
reverseZone = "100.10.in-addr.arpa";
|
||||
ptrDots6 = 17;
|
||||
reverseZone6 = "b.b.b.0.d.4.0.0.c.7.9.e.0.a.2.ip6.arpa";
|
||||
reverseZone6 = "c.c.c.0.d.4.0.0.c.7.9.e.0.a.2.ip6.arpa";
|
||||
|
||||
authZones = attrNames config.my.pdns.auth.bind.zones;
|
||||
in
|
||||
|
Reference in New Issue
Block a user