blob: e33d971a2293f3e1411111c8a3158576c7b7b23b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
{ config, ... }: {
networking = {
useDHCP = false;
# Label lan and wan interfaces
_interfaceLabels = {
enable = true;
interfaces.mgmt0 = "44:a8:42:35:b7:09";
interfaces.lan0 = "44:a8:42:35:b7:0a";
interfaces.wan0 = "44:a8:42:35:b7:0b";
interfaces.lan1 = "44:a8:42:35:b7:0c";
};
# Create bridges
bridges = {
br-lan0.interfaces = [ "lan0" ];
br-wan0.interfaces = [ "wan0" ];
br-lan1.interfaces = [ "lan1" ];
};
interfaces.br-lan0.useDHCP = false;
interfaces.br-wan0.useDHCP = false;
interfaces.br-lan1.useDHCP = false;
# Setup mgmt0
interfaces.mgmt0.ipv4.addresses = [{
address = "192.168.77.11";
prefixLength = 24;
}];
defaultGateway = "192.168.77.1";
nameservers = [ "192.168.77.1" ];
# Firewall for vms
firewall.interfaces.mgmt0.allowedTCPPorts = [ 5900 5901 ];
};
# Wireguard
sops.secrets.wg-home.sopsFile = ./resources/secrets/wg.yaml;
networking.wg-quick.interfaces = {
wg-home.configFile = config.sops.secrets.wg-home.path;
};
}
|
