summaryrefslogtreecommitdiffstats
path: root/configs/retiolum.nix
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2023-09-11 18:24:28 +0200
committertv <tv@krebsco.de>2023-09-13 18:07:11 +0200
commit0c4f3acb281be6290c55a6e96bc29fab5b5c7a11 (patch)
treedadaec00477a095273475ac345b2066b4748c399 /configs/retiolum.nix
parentab1d0479e90f11806d4703ec6fffed3d5f782914 (diff)
stockholm -> hrm
Diffstat (limited to 'configs/retiolum.nix')
-rw-r--r--configs/retiolum.nix26
1 files changed, 26 insertions, 0 deletions
diff --git a/configs/retiolum.nix b/configs/retiolum.nix
new file mode 100644
index 0000000..632cc97
--- /dev/null
+++ b/configs/retiolum.nix
@@ -0,0 +1,26 @@
+{ config, lib, mylib, pkgs, ... }: {
+ krebs.tinc.retiolum = {
+ enable = true;
+ connectTo = builtins.filter (mylib.ne config.krebs.build.host.name) [
+ "ni"
+ "prism"
+ "eve"
+ ];
+ extraConfig = ''
+ LocalDiscovery = yes
+ '';
+ tincPackage = pkgs.tinc_pre;
+ tincUp = lib.mkIf config.systemd.network.enable "";
+ };
+ systemd.network.networks.retiolum = {
+ matchConfig.Name = "retiolum";
+ address = let
+ inherit (config.krebs.build.host.nets.retiolum) ip4 ip6;
+ in [
+ "${ip4.addr}/${toString ip4.prefixLength}"
+ "${ip6.addr}/${toString ip6.prefixLength}"
+ ];
+ };
+ tv.iptables.input-internet-accept-tcp = [ "tinc" ];
+ tv.iptables.input-internet-accept-udp = [ "tinc" ];
+}