39 lines
705 B
Nix
39 lines
705 B
Nix
{config, ...}: {
|
|
services.tailscale.extraSetFlags = ["--accept-routes=false"];
|
|
|
|
networking = {
|
|
useDHCP = false;
|
|
interfaces.eno1.ipv4.addresses = [
|
|
{
|
|
address = "192.168.1.10";
|
|
prefixLength = 24;
|
|
}
|
|
];
|
|
defaultGateway = "192.168.1.1";
|
|
nameservers = ["1.1.1.1"];
|
|
firewall = {
|
|
enable = true;
|
|
trustedInterfaces = ["eno1" "tailscale0" "docker0"];
|
|
allowedUDPPorts = [
|
|
53
|
|
config.services.tailscale.port
|
|
];
|
|
allowedTCPPorts = [
|
|
22
|
|
53
|
|
];
|
|
checkReversePath = "loose";
|
|
};
|
|
};
|
|
|
|
fileSystems."/" = {
|
|
device = "/dev/disk/by-label/NIXROOT";
|
|
fsType = "ext4";
|
|
};
|
|
|
|
fileSystems."/boot" = {
|
|
device = "/dev/disk/by-label/NIXBOOT";
|
|
fsType = "vfat";
|
|
};
|
|
}
|