infrastructure/systems/reisen/default.nix
2025-09-06 23:05:37 -07:00

55 lines
1.1 KiB
Nix

_: {
type = "Linux";
proxmox.node = {
enable = true;
};
access = {
online.available = true;
};
extern.files = {
"/etc/sysctl.d/50-net.conf" = {
source = ./sysctl.50-net.conf;
};
"/etc/network/interfaces.d/50-vmbr0-ipv6.conf" = {
source = ./net.50-vmbr0-ipv6.conf;
};
"/etc/udev/rules.d/90-dri.rules" = {
source = ./udev.90-dri.rules;
};
"/etc/udev/rules.d/90-z2m.rules" = {
source = ./udev.90-z2m.rules;
};
"/root/.ssh/authorized_keys" = {
# TODO: this can't be deployed here...
enable = false;
source = ./root.authorized_keys;
};
};
network.networks = {
local = {
address4 = "10.1.1.40";
address6 = null;
};
int = {
address4 = "10.9.1.2";
address6 = "fd0c::2";
};
tail = {
address4 = "100.101.208.19";
address6 = "fd7a:115c:a1e0::3034:d013";
};
};
exports = {
services = {
tailscale.enable = true;
sshd = {
enable = true;
ports.public.enable = false;
};
proxmox = {
enable = true;
id = "proxmox-reisen";
};
};
};
}