magic_rb/dotfiles
1
0
Fork 0
mirror of https://git.sr.ht/~magic_rb/dotfiles synced 2024-11-22 08:04:20 +01:00
Code Issues Packages Projects Releases Wiki Activity

Disable wlan on blowhole

Browse source 
Signed-off-by: Magic_RB <magic_rb@redalder.org>
This commit is contained in:
Magic_RB 2023-07-18 11:44:27 +02:00
parent 3376c063fb
commit cbc32aef09
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
1 changed files with 9 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
nixos/systems/blowhole/firewall.nix
View file

@ -7,7 +7,7 @@ let
singleton;
wlan = "wlp10s0";
lan = "enp4s0";
lan = "eno1";
wan = "eno3";
doVPN = "do_vpn0";
@ -58,7 +58,7 @@ in
services.dhcpd4 = {
enable = true;
interfaces = [ "${lan}" "${wlan}" ];
interfaces = [ "${lan}" ]; # "${wlan}"
extraConfig = ''
option domain-name-servers ${secret.network.ips.blowhole.ip or ""};
option subnet-mask 255.255.255.0;
@ -77,12 +77,6 @@ in
# Disable the in-built iptable based firewall
firewall.enable = mkForce false;
localCommands = ''
ip link add enp4s0 type dummy || true
ip link set enp4s0 up || true
ip addr add ${secret.network.ips.blowhole.ip or ""}/24 dev enp4s0 || true
'';
interfaces = {
# Don't do DHCP on the LAN interface
"${lan}" = {
@ -92,13 +86,13 @@ in
prefixLength = 24;
}];
};
"${wlan}" = {
useDHCP = false;
ipv4.addresses = [{
address = secret.network.ips.blowhole.wlan or "";
prefixLength = 24;
}];
};
# "${wlan}" = {
# useDHCP = false;
# ipv4.addresses = [{
# address = secret.network.ips.blowhole.wlan or "";
# prefixLength = 24;
# }];
# };
# But do DHCP on the WAN interface
"${wan}".useDHCP = true;
};