This commit is contained in:
mjallen18
2026-01-14 18:00:52 -06:00
parent 59b4729636
commit 7306b08762
23 changed files with 197 additions and 155 deletions

View File

@@ -127,7 +127,6 @@
virt-manager
wget
(pkgs.OVMF.override {
secureBoot = true;
})

View File

@@ -16,18 +16,20 @@
nixpkgs = {
overlays = [
(self: super: {
linuxPackages_pi5-16k = pkgs.linuxPackagesFor (pkgs.linux_6_18.override {
structuredExtraConfig = with lib.kernel; {
CONFIG_ARM64_4K_PAGES = lib.mkForce no;
CONFIG_ARM64_64K_PAGES = lib.mkForce no;
CONFIG_ARM64_16K_PAGES = lib.mkForce yes;
CONFIG_OF_CONFIGFS = yes;
CONFIG_CONFIGFS_FS = yes;
CONFIG_OF_OVERLAY = yes;
};
ignoreConfigErrors = true;
});
(_self: _super: {
linuxPackages_pi5-16k = pkgs.linuxPackagesFor (
pkgs.linux_6_18.override {
structuredExtraConfig = with lib.kernel; {
CONFIG_ARM64_4K_PAGES = lib.mkForce no;
CONFIG_ARM64_64K_PAGES = lib.mkForce no;
CONFIG_ARM64_16K_PAGES = lib.mkForce yes;
CONFIG_OF_CONFIGFS = yes;
CONFIG_CONFIGFS_FS = yes;
CONFIG_OF_OVERLAY = yes;
};
ignoreConfigErrors = true;
}
);
})
];
};

View File

@@ -3,8 +3,8 @@
systemd.network.wait-online.enable = false;
# Force tailscaled to use nftables (Critical for clean nftables-only systems)
# This avoids the "iptables-compat" translation layer issues.
systemd.services.tailscaled.serviceConfig.Environment = [
"TS_DEBUG_FIREWALL_MODE=nftables"
systemd.services.tailscaled.serviceConfig.Environment = [
"TS_DEBUG_FIREWALL_MODE=nftables"
];
networking.nftables.enable = true;
boot.initrd.systemd.network.wait-online.enable = false;

View File

@@ -53,8 +53,16 @@
firewall = {
enable = true;
allowPing = true;
allowedTCPPorts = [ 8192 8880 8881 ];
allowedUDPPorts = [ 8192 8880 8881 ];
allowedTCPPorts = [
8192
8880
8881
];
allowedUDPPorts = [
8192
8880
8881
];
};
};