41 lines
796 B
Nix
41 lines
796 B
Nix
|
{ config, ... }:
|
||
|
|
{
|
||
|
|
sops.secrets.ifsr-apb-auth = { };
|
||
|
|
networking = {
|
||
|
|
domain = "ifsr.de";
|
||
|
|
hostName = "tomate";
|
||
|
|
useNetworkd = true;
|
||
|
|
nftables.enable = true;
|
||
|
|
# Radius authentification
|
||
|
|
supplicant."enp3s0" = {
|
||
|
|
driver = "wired";
|
||
|
|
configFile.path = config.sops.secrets.ifsr-apb-auth.path;
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
services.resolved = {
|
||
|
|
enable = true;
|
||
|
|
fallbackDns = [ "9.9.9.9" ];
|
||
|
|
};
|
||
|
|
|
||
|
|
systemd.network = {
|
||
|
|
enable = true;
|
||
|
|
|
||
|
|
networks."10-wired-default" = {
|
||
|
|
matchConfig.Name = "enp3s0";
|
||
|
|
|
||
|
|
address = [ "141.30.86.196/26" ];
|
||
|
|
routes = [
|
||
|
|
{
|
||
|
|
routeConfig.Gateway = "141.30.86.193";
|
||
|
|
}
|
||
|
|
];
|
||
|
|
networkConfig = {
|
||
|
|
DNS = "141.30.1.1";
|
||
|
|
LLDP = true;
|
||
|
|
EmitLLDP = "nearest-bridge";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|