xqtc/nixos-config-mirror
1
0
Fork 0
mirror of https://git.gay/xqtc/nixos-config synced 2025-05-08 18:37:29 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Compare commits

...

4 commits
8a61160ee8 ... bd0bd3cfd6

Author SHA1 Message Date
xqtc161
bd0bd3cfd6 Add import of nfs.nix 2024-06-16 00:55:34 +02:00
xqtc161
448433e958 I hope that this fixes it and a parser just had autism 2024-06-16 00:53:09 +02:00
xqtc161
9d0e3f61be Ich sollte mich beenden RTFM 2024-06-16 00:42:51 +02:00
xqtc161
31b71ff6ac NFS config; switch from iptables-legacy to nftables 2024-06-16 00:39:47 +02:00
3 changed files with 44 additions and 9 deletions
hosts/x86_64-linux/beleth
default.nixnfs.nixsystemd-mount.nix

2
hosts/x86_64-linux/beleth/default.nix
View file

@ -17,6 +17,7 @@ with lib; {
./networking.nix
./git.nix
./docker.nix
./nfs.nix
../../gc.nix
../../../common
];
@ -135,6 +136,7 @@ with lib; {
services.mullvad-vpn.enable = true;
# Open ports in the firewall.
networking.nftables.enable = true;
networking.firewall.allowedTCPPorts = [22 80 443];
networking.firewall.allowedUDPPorts = [51820];

42
hosts/x86_64-linux/beleth/nfs.nix Normal file
View file

@ -0,0 +1,42 @@
{
config,
lib,
inputs,
...
}: {
# "2a0f:be01:0:100::/64"
# "2a0f:be01:0:200::/64"
# "2a0f:be01:fe:f00::/56"
services.nfs = {
server = {
enable = true;
exports = ''
/export 2a0f:be01:0:100::/64(ro,async,fsid=0,no_subtree_check) 2a0f:be01:0:200::/64(ro,async,fsid=0,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,async,fsid=0,no_subtree_check)
/export/shows 2a0f:be01:0:100::/64(ro,async,no_subtree_check) 2a0f:be01:0:200::/64(ro,async,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,async,no_subtree_check)
/export/movies 2a0f:be01:0:100::/64(ro,async,no_subtree_check) 2a0f:be01:0:200::/64(ro,async,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,async,no_subtree_check)
/export/music 2a0f:be01:0:100::/64(ro,async,no_subtree_check) 2a0f:be01:0:200::/64(ro,async,no_subtree_check) 2a0f:be01:fe:f00::/56(ro,async,no_subtree_check)
'';
};
};
networking.firewall.allowedTCPPorts = [ 2049 ];
networking.firewall.extraInputRules = ''
iifname wg0 ip6 saddr { 2a0f:be01:0:100::/64, 2a0f:be01:0:200::/64, 2a0f:be01:fe:f00::/56 } tcp dport 2049 accept
'';
fileSystems = {
"/export/shows" = {
device = "/home/xqtc/jellyfin/shows";
options = [ "bind" ];
};
"/export/movies" = {
device = "/home/xqtc/jellyfin/movies";
options = [ "bind" ];
};
"/export/music" = {
device = "/home/xqtc/jellyfin/music";
options = [ "bind" ];
};
};
}

9
hosts/x86_64-linux/beleth/systemd-mount.nix
View file

@ -1,9 +0,0 @@
{
config,
lib,
inputs,
...
}: {
systemd.mounts."frotting" = {
};
}