magic_rb/dotfiles
1
0
Fork 0
mirror of https://git.sr.ht/~magic_rb/dotfiles synced 2024-11-25 17:46:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Disable wlan on blowhole

Browse source 
Signed-off-by: Magic_RB <magic_rb@redalder.org>
This commit is contained in:
Magic_RB 2023-07-18 11:44:27 +02:00
parent 3376c063fb
commit cbc32aef09
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
1 changed files with 9 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
nixos/systems/blowhole/firewall.nix
View file

@ -7,7 +7,7 @@ let
singleton; singleton;
wlan = "wlp10s0"; wlan = "wlp10s0";
lan = "enp4s0"; lan = "eno1";
wan = "eno3"; wan = "eno3";
doVPN = "do_vpn0"; doVPN = "do_vpn0";
@ -58,7 +58,7 @@ in
services.dhcpd4 = { services.dhcpd4 = {
enable = true; enable = true;
interfaces = [ "${lan}" "${wlan}" ]; interfaces = [ "${lan}" ]; # "${wlan}"
extraConfig = '' extraConfig = ''
option domain-name-servers ${secret.network.ips.blowhole.ip or ""}; option domain-name-servers ${secret.network.ips.blowhole.ip or ""};
option subnet-mask 255.255.255.0; option subnet-mask 255.255.255.0;
@ -77,12 +77,6 @@ in
# Disable the in-built iptable based firewall # Disable the in-built iptable based firewall
firewall.enable = mkForce false; firewall.enable = mkForce false;
localCommands = ''
ip link add enp4s0 type dummy || true
ip link set enp4s0 up || true
ip addr add ${secret.network.ips.blowhole.ip or ""}/24 dev enp4s0 || true
'';
interfaces = { interfaces = {
# Don't do DHCP on the LAN interface # Don't do DHCP on the LAN interface
"${lan}" = { "${lan}" = {
@ -92,13 +86,13 @@ in
prefixLength = 24; prefixLength = 24;
}]; }];
}; };
"${wlan}" = { # "${wlan}" = {
useDHCP = false; # useDHCP = false;
ipv4.addresses = [{ # ipv4.addresses = [{
address = secret.network.ips.blowhole.wlan or ""; # address = secret.network.ips.blowhole.wlan or "";
prefixLength = 24; # prefixLength = 24;
}]; # }];
}; # };
# But do DHCP on the WAN interface # But do DHCP on the WAN interface
"${wan}".useDHCP = true; "${wan}".useDHCP = true;
}; };