From 3be5380c586f667277d4a70f66f8ffc6c2d5b93a Mon Sep 17 00:00:00 2001
From: Rouven Seifert <rouven@rfive.de>
Date: Thu, 21 Mar 2024 15:47:32 +0100
Subject: [PATCH] quitte: network fixes

---
 hosts/quitte/network.nix | 43 ++--------------------------------------
 1 file changed, 2 insertions(+), 41 deletions(-)

diff --git a/hosts/quitte/network.nix b/hosts/quitte/network.nix
index 583f388..efb4ac2 100644
--- a/hosts/quitte/network.nix
+++ b/hosts/quitte/network.nix
@@ -34,18 +34,12 @@ in
 
   services.resolved = {
     enable = true;
-    #dnssec = "false";
-    fallbackDns = [ "1.1.1.1" ];
+    fallbackDns = [ "9.9.9.9" ];
   };
 
-  # workaround for networkd waiting for shit
-  systemd.services.systemd-networkd-wait-online.serviceConfig.ExecStart = [
-    "" # clear old command
-    "${config.systemd.package}/lib/systemd/systemd-networkd-wait-online --any"
-  ];
-
   systemd.network = {
     enable = true;
+    wait-online.anyInterface = true;
 
     # Interfaces on the machine
     networks."10-wired-default" = {
@@ -59,39 +53,6 @@ in
       ];
       networkConfig = {
         DNS = "141.30.1.1";
-        #IPv6AcceptRA = true;
-      };
-    };
-
-    # defining network device for wireguard connections
-    netdevs."fsr-wg" = {
-      netdevConfig = {
-        Kind = "wireguard";
-        Name = "fsr-wg";
-        Description = "fsr enterprise wireguard";
-      };
-      wireguardConfig = {
-        PrivateKeyFile = config.sops.secrets."wg-fsr".path;
-        ListenPort = wireguard_port;
-      };
-      wireguardPeers = [
-        {
-          # tassilo
-          wireguardPeerConfig = {
-            PublicKey = "vgo3le9xrFsIbbDZsAhQZpIlX+TuWjfEyUcwkoqUl2Y=";
-            AllowedIPs = [ "10.66.66.100/32" ];
-            PersistentKeepalive = 25;
-          };
-        }
-      ];
-    };
-
-    # fsr wireguard server
-    networks."fsr-wg" = {
-      matchConfig.Name = "fsr-wg";
-      networkConfig = {
-        Address = "10.66.66.1/24";
-        IPForward = "ipv4";
       };
     };
   };