nixos-config/nixos/components/network/tinc/private.nix

131 lines
4 KiB
Nix
Raw Normal View History

2023-01-26 21:29:47 +01:00
{ ipv4
, ipv6
, config
, optionalString
, concatStringsSep
, factsGenerator
2023-01-26 21:29:47 +01:00
, mapAttrsToList
, ...
}:
let
hosts = {
mobi = "10.23.42.23";
sterni = "10.23.42.24";
bobi = "10.23.42.25";
pepe = "10.23.42.26";
2023-02-13 18:40:56 +01:00
cream = "10.23.42.27";
2023-04-30 00:47:46 +02:00
chungus = "10.23.42.28";
2023-12-17 13:06:57 +01:00
cherry = "10.23.42.29";
2023-01-26 21:29:47 +01:00
robi = "10.23.42.111";
2024-03-03 21:58:52 +01:00
orbi = "10.23.42.100";
2023-01-26 21:29:47 +01:00
};
subDomains = {
2024-03-03 21:58:52 +01:00
# orbi
2024-04-07 10:18:13 +02:00
"transmission2.orbi" = hosts.orbi;
"sonarr.orbi" = hosts.orbi;
"radarr.orbi" = hosts.orbi;
"prowlarr.orbi" = hosts.orbi;
2024-05-10 20:53:21 +02:00
"photoprism.orbi" = hosts.orbi;
2023-02-08 00:19:09 +01:00
# robi
"grafana.robi" = hosts.robi;
2023-05-14 02:59:03 +02:00
"loki.robi" = hosts.robi;
2023-02-08 00:19:09 +01:00
"prometheus.robi" = hosts.robi;
2023-05-03 21:20:51 +02:00
"sync.robi" = hosts.robi;
2023-05-14 02:59:03 +02:00
"transmission.robi" = hosts.robi;
"transmission2.robi" = hosts.robi;
2023-11-17 15:13:30 +01:00
"sonarr.robi" = hosts.robi;
"radarr.robi" = hosts.robi;
2023-11-18 12:49:47 +01:00
"tdarr.robi" = hosts.robi;
"prowlarr.robi" = hosts.robi;
"jellyseerr.robi" = hosts.robi;
2023-11-20 09:49:34 +01:00
"unmanic.robi" = hosts.robi;
2023-05-01 15:21:15 +02:00
# chungus
2023-10-05 16:30:34 +02:00
"de.tts.chungus" = hosts.chungus;
"en.tts.chungus" = hosts.chungus;
2023-05-14 02:59:03 +02:00
"flix.chungus" = hosts.chungus;
2023-10-05 16:30:34 +02:00
"git.chungus" = hosts.chungus;
2023-05-01 15:21:15 +02:00
"grafana.chungus" = hosts.chungus;
2023-05-14 02:59:03 +02:00
"loki.chungus" = hosts.chungus;
2023-05-01 15:21:15 +02:00
"prometheus.chungus" = hosts.chungus;
2023-10-05 16:30:34 +02:00
"s3.chungus" = hosts.chungus;
2024-01-07 00:27:29 +01:00
"minio.chungus" = hosts.chungus;
2023-05-03 21:20:51 +02:00
"sync.chungus" = hosts.chungus;
2023-05-14 02:59:03 +02:00
"tdarr.chungus" = hosts.chungus;
"tts.chungus" = hosts.chungus;
2024-03-04 19:05:30 +01:00
"paperless.chungus" = hosts.chungus;
2023-01-26 21:29:47 +01:00
};
network = "private";
in
2022-10-13 10:51:21 +02:00
{
2023-01-26 21:29:47 +01:00
networking.firewall.trustedInterfaces = [ "tinc.${network}" ];
2022-10-13 10:51:21 +02:00
clanCore.facts.services.tinc_private = factsGenerator.tinc { name = "private"; };
2022-10-13 10:51:21 +02:00
2023-01-26 21:29:47 +01:00
services.tinc.networks = {
${network} = {
ed25519PrivateKeyFile = config.clanCore.facts.services.tinc_private.secret."tinc.private.ed25519_key.priv".path;
2023-01-26 21:29:47 +01:00
interfaceType = "tap";
extraConfig = ''
LocalDiscovery = yes
'';
hostSettings = {
mobi = {
subnets = [{ address = hosts.mobi; }];
settings.Ed25519PublicKey = "X5sp3YYevVNUrzYvi+HZ2iW5WbO0bIb58jR4jZFH6MB";
};
2023-02-13 18:40:56 +01:00
cream = {
subnets = [{ address = hosts.cream; }];
settings.Ed25519PublicKey = "Y/YRA90mAlNEmdhUWlUTHjjsco6d6hlvW11sPtarIdL";
};
2023-12-17 13:06:57 +01:00
cherry = {
2023-12-17 16:17:28 +01:00
subnets = [{ address = hosts.cherry; }];
2023-12-17 13:06:57 +01:00
settings.Ed25519PublicKey = "BsPIrZjbzn0aryC0HO3OXSb4oFCMmzNDmMDQmxUXUuC";
};
2023-01-26 21:29:47 +01:00
sterni = {
subnets = [{ address = hosts.sterni; }];
settings.Ed25519PublicKey = "r6mRDc814z2YtyG9ev/XXV2SgquqWR8n53V13xNXb7O";
};
bobi = {
subnets = [{ address = hosts.bobi; }];
settings.Ed25519PublicKey = "jwvNd4oAgz2cWEI74VTVYU1qgPWq823/a0iEDqJ8KMD";
};
pepe = {
subnets = [{ address = hosts.pepe; }];
settings.Ed25519PublicKey = "LnE+w6ZfNCky4Kad3TBxpFKRJ2PJshkSpW6mC3pcsPI";
};
2023-04-30 00:47:46 +02:00
chungus = {
subnets = [{ address = hosts.chungus; }];
settings.Ed25519PublicKey = "mJP+zzYGv42KItpSf3lMkr3dwa5xW3n3hi0W2Z75jfJ";
};
2023-01-26 21:29:47 +01:00
robi = {
addresses = [{ address = "144.76.13.147"; }];
subnets = [{ address = hosts.robi; }];
settings.Ed25519PublicKey = "bZUbSdME4fwudNVbUoNO7PpoOS2xALsyTs81F260KbL";
};
2024-03-03 21:58:52 +01:00
orbi = {
addresses = [{ address = "95.216.66.212"; }];
subnets = [{ address = hosts.orbi; }];
settings.Ed25519PublicKey = "/1OE8xsnRT6egxd/+iH9TE+tzlwiUJeNsGFIIWyc70A";
};
2023-01-26 21:29:47 +01:00
};
};
2022-10-13 10:51:21 +02:00
};
2023-01-26 21:29:47 +01:00
systemd.network.enable = true;
systemd.network.networks.${network}.extraConfig = ''
[Match]
Name = tinc.${network}
[Link]
# tested with `ping -6 turingmachine.r -s 1378`, not sure how low it must be
MTUBytes=1377
[Network]
${optionalString (ipv4 != null) "Address=${ipv4}/24"}
${optionalString (ipv6 != null) "Address=${ipv6}/28"}
RequiredForOnline = no
LinkLocalAddressing = no
'';
networking.extraHosts = concatStringsSep "\n" (mapAttrsToList (name: ip: "${ip} ${name}.${network}") (hosts // subDomains));
2022-10-13 10:51:21 +02:00
}