diff options
| author | Tim Keller <tjk@tjkeller.xyz> | 2026-09-15 15:38:50 -0500 |
|---|---|---|
| committer | Tim Keller <tjk@tjkeller.xyz> | 2026-09-15 15:38:50 -0500 |
| commit | 871ff4e7fb4c22b2aea5cec147b091128fd50c72 (patch) | |
| tree | 52b9d7d4b50cc25fdc2f4fc1633086e3b5ab5911 /hosts/poweredge-pro/configuration.nix | |
| parent | d2f1ca11963edc6bbe0ee2568d90db3da818a965 (diff) | |
| download | nixos-871ff4e7fb4c22b2aea5cec147b091128fd50c72.tar.xz nixos-871ff4e7fb4c22b2aea5cec147b091128fd50c72.zip | |
docker config + enable configs and fix bug poweredge pro
Diffstat (limited to 'hosts/poweredge-pro/configuration.nix')
| -rw-r--r-- | hosts/poweredge-pro/configuration.nix | 27 |
1 files changed, 26 insertions, 1 deletions
diff --git a/hosts/poweredge-pro/configuration.nix b/hosts/poweredge-pro/configuration.nix index fc6b854..53f2599 100644 --- a/hosts/poweredge-pro/configuration.nix +++ b/hosts/poweredge-pro/configuration.nix @@ -3,6 +3,8 @@ ./key.nix ./networking.nix ./fileshares.nix + ./filebrowser.nix + ./dns.nix ]; # Setup bootloader @@ -18,12 +20,35 @@ zfs.enable = true; #cuda.enable = true; }; - collections.virtualization.enable = true; + collections = { + virtualization.enable = true; + development.docker.enable = true; + }; }; # Import zfs pools boot.zfs.extraPools = [ "VMDisk" "Storage" ]; + # Workaround for docker + libvirt bug + systemd.services.bridge-nf-off = { + description = "Keep bridged VM traffic out of the IP netfilter path"; + after = [ "docker.service" ]; + partOf = [ "docker.service" ]; + wantedBy = [ "multi-user.target" "docker.service" ]; + serviceConfig = { + Type = "oneshot"; + RemainAfterExit = true; + }; + script = '' + ${pkgs.kmod}/bin/modprobe br_netfilter 2>/dev/null || true + for k in iptables ip6tables arptables; do + echo 0 > /proc/sys/net/bridge/bridge-nf-call-$k 2>/dev/null || true + done + ''; + }; + + networking.firewall.checkReversePath = "loose"; + # Enable user timmy _users.timmy.enable = true; |