rouven.seifert/nixos-config
1
1
Fork 0
mirror of https://git.sr.ht/~rouven/nixos-config synced 2025-04-04 13:56:19 +02:00
Code Issues Projects Releases Packages Wiki Activity

nuc: networking updates

Browse source
This commit is contained in:
Rouven Seifert 2024-05-13 11:59:14 +02:00
parent 77b3d974c5
commit d2353d8b59
4 changed files with 15 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/nuc/default.nix
View file

@ -54,6 +54,8 @@
helix helix
lsof lsof
btdu btdu
tcpdump
mtr
]; ];
programs.git = { programs.git = {
enable = true; enable = true;

5
hosts/nuc/modules/backup/default.nix
View file

@ -19,6 +19,11 @@
"/var/log" "/var/log"
"/nix/persist" "/nix/persist"
]; ];
# don't backup these for now
exclude_patterns = [
"/var/lib/movies"
"/var/lib/shows"
];
repositories = [ repositories = [
{ {
label = "nuc"; label = "nuc";

5
hosts/nuc/modules/networks/default.nix
View file

@ -34,7 +34,10 @@
routeConfig.Gateway = "192.168.42.1"; routeConfig.Gateway = "192.168.42.1";
}]; }];
networkConfig = { networkConfig = {
DNS = "192.168.42.1"; DNS = [
"9.9.9.9"
"149.112.112.112"
];
LLDP = true; LLDP = true;
EmitLLDP = "nearest-bridge"; EmitLLDP = "nearest-bridge";
DNSSEC = false; DNSSEC = false;

8
hosts/nuc/modules/torrent/default.nix
View file

@ -78,7 +78,7 @@ in
Group = cfg.user; Group = cfg.user;
Restart = "always"; Restart = "always";
PrivateNetwork = true; # PrivateNetwork = true;
NetworkNamespacePath = "/var/run/netns/torrent"; NetworkNamespacePath = "/var/run/netns/torrent";
ExecStart = "${pkgs.qbittorrent-nox}/bin/qbittorrent-nox --profile=${cfg.stateDir} --webui-port=${toString cfg.port}"; ExecStart = "${pkgs.qbittorrent-nox}/bin/qbittorrent-nox --profile=${cfg.stateDir} --webui-port=${toString cfg.port}";
@ -88,9 +88,9 @@ in
# Avoid using nscd (leaks dns) # Avoid using nscd (leaks dns)
InaccessiblePaths = [ "/run/nscd" ]; InaccessiblePaths = [ "/run/nscd" ];
# BindReadOnlyPaths = [ BindReadOnlyPaths = [
# "/etc/netns/mullvad/resolv.conf:/etc/resolv.conf" "/etc/netns/torrent/resolv.conf:/etc/resolv.conf"
# ]; ];
# systemd-analyze --no-pager security qbittorrent.service # systemd-analyze --no-pager security qbittorrent.service
CapabilityBoundingSet = null; CapabilityBoundingSet = null;