diff options
author | lassulus <lassulus@lassul.us> | 2017-07-16 12:05:35 +0200 |
---|---|---|
committer | lassulus <lassulus@lassul.us> | 2017-07-16 12:05:35 +0200 |
commit | cd7c0971ccc9023f63feb75d4abe514fdc03a079 (patch) | |
tree | 704c47afe8cd43a36f36f251cd53b340ec5ec4da /makefu/1systems/drop | |
parent | b91a4c4b0f0958cdc5e7c0d60523326083f275d4 (diff) | |
parent | 0e0ad14c373a038e6d347017f5efe172c7409793 (diff) |
Merge remote-tracking branch 'gum/master'
Diffstat (limited to 'makefu/1systems/drop')
-rw-r--r-- | makefu/1systems/drop/config.nix | 40 | ||||
-rw-r--r-- | makefu/1systems/drop/source.nix | 3 |
2 files changed, 43 insertions, 0 deletions
diff --git a/makefu/1systems/drop/config.nix b/makefu/1systems/drop/config.nix new file mode 100644 index 000000000..b7e0d0395 --- /dev/null +++ b/makefu/1systems/drop/config.nix @@ -0,0 +1,40 @@ +{ config, pkgs, ... }: +let + external-ip = "45.55.145.62"; + default-gw = "45.55.128.1"; + prefixLength = 18; +in { + imports = [ + <stockholm/makefu> + <stockholm/makefu/2configs/hw/CAC.nix> + <stockholm/makefu/2configs/save-diskspace.nix> + <stockholm/makefu/2configs/torrent.nix> + ]; + krebs = { + enable = true; + tinc.retiolum.enable = true; + build.host = config.krebs.hosts.drop; + }; + + boot.loader.grub.device = "/dev/vda"; + boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "ehci_pci" "virtio_pci" "virtio_blk" "virtio_net" "virtio_scsi" ]; + fileSystems."/" = { + device = "/dev/vda1"; + fsType = "ext4"; + }; + + networking = { + firewall = { + allowPing = true; + logRefusedConnections = false; + allowedTCPPorts = [ ]; + allowedUDPPorts = [ 655 ]; + }; + interfaces.enp0s3.ip4 = [{ + address = external-ip; + inherit prefixLength; + }]; + defaultGateway = default-gw; + nameservers = [ "8.8.8.8" ]; + }; +} diff --git a/makefu/1systems/drop/source.nix b/makefu/1systems/drop/source.nix new file mode 100644 index 000000000..74de846c0 --- /dev/null +++ b/makefu/1systems/drop/source.nix @@ -0,0 +1,3 @@ +import <stockholm/makefu/source.nix> { + name="drop"; +} |