config cleanups

This commit is contained in:
2026-03-27 13:29:45 -05:00
parent 9ae5c8ab6d
commit 06c1ae13df
8 changed files with 91 additions and 27 deletions

View File

@@ -78,13 +78,16 @@
};
network = {
hostName = "macbook-pro-nixos";
iwd.enable = true;
networkmanager.enable = true;
extraFirewallCommands = ''
iptables -I INPUT -m pkttype --pkt-type multicast -j ACCEPT
iptables -A INPUT -m pkttype --pkt-type multicast -j ACCEPT
iptables -I INPUT -p udp -m udp --match multiport --dports 1990,2021 -j ACCEPT
'';
ipv4 = {
method = "auto";
interface = "wlan0";
};
firewall = {
allowedUDPPorts = [
1990
2021
];
};
};
services = {
nebula = {
@@ -113,6 +116,8 @@
# - CONFIG_ANDROID_BINDERFS is not enabled
};
systemd.services.virt-secret-init-encryption.enable = false;
# List packages installed in system profile. To search, run:
# $ nix search wget
environment.systemPackages =

View File

@@ -133,11 +133,10 @@
allowedTCPPorts = [ 53 ];
allowedUDPPorts = [ 53 ];
};
networkmanager = {
profiles = {
"static-end0" = {
type = "ethernet";
};
networkmanager.profiles = {
"static-end0" = {
type = "ethernet";
interface = "end0";
};
};
};

View File

@@ -24,6 +24,10 @@
network = {
hostName = "nixos";
ipv4 = {
method = "auto";
interface = "wlan0";
};
firewall = {
enable = true;
allowPing = true;

View File

@@ -65,8 +65,10 @@
network = {
hostName = "allyx";
iwd.enable = true;
networkmanager.enable = true;
ipv4 = {
method = "auto";
interface = "wlan0";
};
};
services = {

View File

@@ -127,6 +127,7 @@ in
address = "10.0.1.3";
method = "manual";
gateway = "10.0.1.1";
dns = "1.1.1.1";
interface = "enp197s0";
};
hostId = "4b501480";

View File

@@ -75,8 +75,10 @@
network = {
hostName = "matt-nixos";
iwd.enable = true;
networkmanager.enable = true;
ipv4 = {
method = "auto";
interface = "wlan0";
};
};
services = {