make preps for linnode
This commit is contained in:
@@ -23,17 +23,24 @@ in
|
|||||||
modules = {
|
modules = {
|
||||||
system = {
|
system = {
|
||||||
tailscale.enable = true;
|
tailscale.enable = true;
|
||||||
|
ssh.enable = true;
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
# use the systemd-boot EFI boot loader.
|
# use the systemd-boot EFI boot loader.
|
||||||
boot.loader.systemd-boot.enable = true;
|
#boot.loader.systemd-boot.enable = true;
|
||||||
boot.loader.efi.canTouchEfiVariables = true;
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
boot.loader.grub.forceInstall = true;
|
||||||
|
|
||||||
# setup hostname and networking stack
|
# setup hostname and networking stack
|
||||||
networking.hostName = "vaniville"; # Define your hostname.
|
networking = {
|
||||||
networking.networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
hostName = "vaniville"; # Define your hostname.
|
||||||
|
usePredictableInterfaceNames = false;
|
||||||
|
useDHCP = false;
|
||||||
|
#networkmanager.enable = true; # Easiest to use and most distros use this by default.
|
||||||
|
};
|
||||||
|
|
||||||
|
|
||||||
# define shell
|
# define shell
|
||||||
programs.zsh.enable = true;
|
programs.zsh.enable = true;
|
||||||
@@ -41,6 +48,9 @@ in
|
|||||||
|
|
||||||
# package install list
|
# package install list
|
||||||
environment.systemPackages = with pkgs; [
|
environment.systemPackages = with pkgs; [
|
||||||
|
inetutils
|
||||||
|
mtr
|
||||||
|
sysstat
|
||||||
];
|
];
|
||||||
|
|
||||||
# allow proprietary packages
|
# allow proprietary packages
|
||||||
@@ -73,7 +83,6 @@ in
|
|||||||
firewall = {
|
firewall = {
|
||||||
enable = true;
|
enable = true;
|
||||||
allowedTCPPorts = [ 22 80 443 25777 7567 21115 21116 21117 21118 21119 ];
|
allowedTCPPorts = [ 22 80 443 25777 7567 21115 21116 21117 21118 21119 ];
|
||||||
allowedUDPPorts = [ 25777 21116 ];
|
|
||||||
# tailscale will also need its UDP port open:
|
# tailscale will also need its UDP port open:
|
||||||
allowedUDPPorts = [ config.services.tailscale.port 25777 21116 ];
|
allowedUDPPorts = [ config.services.tailscale.port 25777 21116 ];
|
||||||
trustedInterfaces = [ "tailscale0" ];
|
trustedInterfaces = [ "tailscale0" ];
|
||||||
|
|||||||
Reference in New Issue
Block a user