home/nixos-servers
home/nixos-servers
Archived
2
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Wiki Activity Actions

add vm working with dhcp+dns

Browse source
This commit is contained in:
Pim Kunis 2024-01-29 22:21:15 +01:00
parent 532d76c049
commit 63688f3068
6 changed files with 77 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

6
nixos/modules/networking/default.nix
View file

@ -90,11 +90,11 @@ in {
config = {
networking = {
domain = if machine.type == "physical" then "hyp" else "dmz";
nftables.enable = true;
useDHCP = machine.type == "virtual";
nftables.enable = false;
useDHCP = false;
firewall = {
enable = true;
enable = false;
checkReversePath = false;
};
};

3
nixos/modules/networking/dmz/default.nix
View file

@ -23,7 +23,8 @@ in
config = lib.mkIf cfg.enable {
lab.networking.allowDMZConnectivity = true;
networking.firewall.interfaces.${config.lab.networking.dmzBridgeName} = {
# TODO: listen only on dmz interface, make this portable between physical and VM.
networking.firewall = {
allowedTCPPorts = [ 53 5353 ];
allowedUDPPorts = [ 53 67 5353 ];
};