Infini-FRAMEWORK/router: init

This commit is contained in:
Infinidoge 2025-02-15 04:03:15 -05:00
parent 4f3141bc9c
commit 3e640d807e
Signed by: Infinidoge
SSH key fingerprint: SHA256:oAMyvotlNFraMmZmr+p6AxnNfW/GioTs1pOn3V4tQ7A
2 changed files with 60 additions and 58 deletions

View file

@ -9,6 +9,7 @@
./hardware-configuration.nix
./filesystems.nix
./displays.nix
./router.nix
];
system.stateVersion = "23.05";
@ -163,62 +164,4 @@
}
];
};
specialisation.router.configuration = {
networking = {
interfaces."enp0s13f0u1" = {
ipv4.addresses = [
{
address = "192.168.100.1";
prefixLength = 24;
}
];
};
firewall.interfaces."enp0s13f0u1" = {
allowedTCPPorts = [ 53 ];
allowedUDPPorts = [
53
67
];
};
nat = {
enable = true;
internalInterfaces = [ "enp0s13f0u1" ];
externalInterface = "wlp170s0";
};
};
services.dnsmasq = {
enable = true;
settings = {
server = [
"8.8.8.8"
"1.1.1.1"
];
domain-needed = true;
bogus-priv = true;
no-resolv = true;
cache-size = 1000;
dhcp-range = [ "enp0s13f0u1,192.168.100.10,192.168.100.100" ];
interface = "enp0s13f0u1";
dhcp-host = "192.168.100.1";
local = "/lan/";
domain = "lan";
expand-hosts = true;
no-hosts = true;
address = "/infini-framework.lan/192.168.100.1";
};
};
boot.kernel.sysctl = {
"net.ipv4.conf.all.forwarding" = true;
"net.ipv6.conf.all.forwarding" = true;
};
};
}

View file

@ -0,0 +1,59 @@
{
specialisation.router.configuration = {
networking = {
interfaces."enp0s13f0u1" = {
ipv4.addresses = [
{
address = "192.168.100.1";
prefixLength = 24;
}
];
};
firewall.interfaces."enp0s13f0u1" = {
allowedTCPPorts = [ 53 ];
allowedUDPPorts = [
53
67
];
};
nat = {
enable = true;
internalInterfaces = [ "enp0s13f0u1" ];
externalInterface = "wlp170s0";
};
};
services.dnsmasq = {
enable = true;
settings = {
server = [
"8.8.8.8"
"1.1.1.1"
];
domain-needed = true;
bogus-priv = true;
no-resolv = true;
cache-size = 1000;
dhcp-range = [ "enp0s13f0u1,192.168.100.10,192.168.100.100" ];
interface = "enp0s13f0u1";
dhcp-host = "192.168.100.1";
local = "/lan/";
domain = "lan";
expand-hosts = true;
no-hosts = true;
address = "/infini-framework.lan/192.168.100.1";
};
};
boot.kernel.sysctl = {
"net.ipv4.conf.all.forwarding" = true;
"net.ipv6.conf.all.forwarding" = true;
};
};
}