ringofstorms/dotfiles
ringofstorms/dotfiles
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge branch 'master' of ssh://git.joshuabell.xyz:3032/ringofstorms/dotfiles

Browse source
This commit is contained in:
RingOfStorms (Joshua Bell) 2025-10-09 18:36:47 -05:00
commit 8e5e514b16
1 changed files with 20 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

40
hosts/h003/mods/networking.nix
View file

@ -110,9 +110,17 @@
};
vlan10 = {
# Block all WAN
allowedTCPPorts = [ ];
allowedUDPPorts = [ ];
allowedTCPPorts = [
22 # SSH (for remote admin access)
53 # DNS
80
443 # HTTP
];
allowedUDPPorts = [
53 # DNS
67 # DHCP server
68
];
};
# LAN interface (VLAN 20) - FULL SERVICE
@ -129,21 +137,6 @@
68 # DHCP client responses
];
};
# NOTE check this...
vlan10 = {
allowedTCPPorts = [
22 # SSH (for remote admin access)
53 # DNS
80
443 # HTTP
];
allowedUDPPorts = [
53 # DNS
67 # DHCP server
68
];
};
};
};
@ -164,8 +157,8 @@
settings = {
# Listen only on LAN interface
interface = [
"vlan20"
"vlan10"
"vlan20"
];
bind-interfaces = true;
@ -174,6 +167,13 @@
# Note in Ad GuardHome in DNS Settings add localhost:9053 to Private reverse DNS servers and enable them
listen-address = "127.0.0.1";
port = 9053;
host-record = [
"media.joshuabell.xyz,10.12.14.10"
"jellyfin.joshuabell.xyz,10.12.14.10"
];
address = [
"/h001.local.joshuabell.xyz/10.12.14.10"
];
# DHCP range and settings
dhcp-range = [
@ -206,8 +206,8 @@
enable-ra = lib.mkIf config.networking.enableIPv6 true;
# interface, min interval, max interval
ra-param = lib.mkIf config.networking.enableIPv6 [
"vlan20,60,120"
"vlan10,60,120"
"vlan20,60,120"
];
# DNS settings (not needed since we use adguard for dns)