39 lines
821 B
Nix
39 lines
821 B
Nix
{ options, host, lib, ... }:
|
|
{
|
|
networking = {
|
|
hostName = "${host}";
|
|
networkmanager.enable = false;
|
|
useNetworkd = true;
|
|
timeServers = options.networking.timeServers.default ++ ["pool.ntp.org"];
|
|
dhcpcd.enable = false;
|
|
firewall = {
|
|
enable = lib.mkDefault false;
|
|
autoLoadConntrackHelpers = true;
|
|
};
|
|
nftables.enable = true;
|
|
};
|
|
boot.initrd.systemd = {
|
|
network.enable = true;
|
|
|
|
};
|
|
systemd.network.enable = true;
|
|
services.resolved = {
|
|
enable = true;
|
|
fallbackDns = [
|
|
"2a07:a8c0::18:7be4"
|
|
"2a07:a8c1::18:7be4"
|
|
"79.198.199.184"
|
|
];
|
|
};
|
|
services.tailscale = {
|
|
enable = true;
|
|
useRoutingFeatures = "both";
|
|
openFirewall = true;
|
|
extraSetFlags = [
|
|
"--ssh"
|
|
"--accept-dns=false"
|
|
"--accept-routes"
|
|
];
|
|
};
|
|
}
|