rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-25 16:08:30 +02:00
Code Issues Projects Releases Packages Wiki Activity

falkenstein: fix dkim record and wireguard dns

Browse source
This commit is contained in:
Rouven Seifert 2024-04-10 00:30:35 +02:00
parent 34104a42fb
commit 358220a12e
Signed by: rouven.seifert
GPG key ID: B95E8FE6B11C4D09
2 changed files with 13 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

18
hosts/falkenstein/modules/networks/default.nix
View file

@ -1,4 +1,4 @@
{ config, ... }:
{ config, pkgs, ... }:
{
age.secrets = {
"wireguard/dorm/private" = {
@ -11,6 +11,12 @@
};
};
environment.systemPackages = with pkgs; [
mtr
inetutils
dnsutils
wireguard-tools
];
networking = {
hostName = "falkenstein";
nftables.enable = true;
@ -18,6 +24,7 @@
useNetworkd = true;
enableIPv6 = true;
firewall = {
allowedUDPPorts = [ 51820 ];
extraInputRules = ''
ip saddr 192.168.0.0/16 tcp dport 19531 accept comment "Allow journald gateway access from local networks"
'';
@ -31,10 +38,6 @@
"2620:fe::fe"
"2620:fe::9"
];
extraConfig = ''
[Resolve]
DNSStubListener=no
'';
};
systemd.network = {
enable = true;
@ -86,8 +89,9 @@
matchConfig.Name = "wg0";
networkConfig = {
Address = "192.168.43.4/32";
DNS = "192.168.42.1";
DNSSEC = true;
DNS = "192.168.43.1";
Domains = "~vpn.rfive.de ~43.168.192.in-addr.arpa";
DNSSEC = false;
BindCarrier = [ "ens3" ];
};
};