Raphaël Numbus
35 lines
927 B
Nix
35 lines
927 B
Nix
{ config, pkgs, lib, ... }:
|
|
|
|
{
|
|
# Hostname
|
|
networking.hostName = "numbus-server";
|
|
|
|
networking.networkmanager.enable = false;
|
|
|
|
# Allow rootless containers to bind to port 53 and up
|
|
boot.kernel.sysctl."net.ipv4.ip_unprivileged_port_start" = 53;
|
|
|
|
# Bridge configuration for VMs
|
|
networking.bridges.br0.interfaces = [ "TARGET_INTERFACE" ];
|
|
networking.interfaces."TARGET_INTERFACE".useDHCP = false;
|
|
networking.interfaces.br0.useDHCP = false;
|
|
networking.nameservers = [ "HOME_SERVER_IP" "9.9.9.9" ];
|
|
networking.interfaces.br0.ipv4.addresses = [{
|
|
address = "HOME_SERVER_IP";
|
|
prefixLength = 24;
|
|
}];
|
|
networking.defaultGateway = {
|
|
address = "HOME_ROUTER_IP";
|
|
interface = "br0";
|
|
};
|
|
|
|
networking.nftables.enable = true;
|
|
|
|
# Open ports in the firewall
|
|
networking.firewall = {
|
|
enable = true;
|
|
allowPing = true;
|
|
allowedTCPPorts = [ 53 80 443 ];
|
|
allowedUDPPorts = [ 53 443 ];
|
|
};
|
|
} |