bootstrap host yate
This commit is contained in:
parent
a3a3502b70
commit
4300a66aaf
@ -43,6 +43,10 @@
|
|||||||
deployment.targetHost = "nerd.bula22.de";
|
deployment.targetHost = "nerd.bula22.de";
|
||||||
};
|
};
|
||||||
|
|
||||||
|
yate = { ... }: {
|
||||||
|
deployment.targetHost = "yate.bula22.de";
|
||||||
|
};
|
||||||
|
|
||||||
pre-router = { config, pkgs, ... }: {
|
pre-router = { config, pkgs, ... }: {
|
||||||
deployment.targetHost = "lightbuffet.bula22.de";
|
deployment.targetHost = "lightbuffet.bula22.de";
|
||||||
deployment.keys = {
|
deployment.keys = {
|
||||||
|
101
hosts/yate/configuration.nix
Normal file
101
hosts/yate/configuration.nix
Normal file
@ -0,0 +1,101 @@
|
|||||||
|
{ config, pkgs, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[ # Include the results of the hardware scan.
|
||||||
|
./hardware-configuration.nix
|
||||||
|
./voip.nix
|
||||||
|
];
|
||||||
|
|
||||||
|
# Use the systemd-boot EFI boot loader.
|
||||||
|
boot.loader.systemd-boot.enable = true;
|
||||||
|
boot.loader.efi.canTouchEfiVariables = true;
|
||||||
|
|
||||||
|
networking.hostName = "yate";
|
||||||
|
|
||||||
|
boot.kernel.sysctl = {
|
||||||
|
"net.ipv4.conf.all.forwarding" = true;
|
||||||
|
"net.ipv6.conf.all.forwarding" = true;
|
||||||
|
};
|
||||||
|
|
||||||
|
networking.useNetworkd = true;
|
||||||
|
systemd.network = {
|
||||||
|
networks."10-ens18" = {
|
||||||
|
matchConfig = {
|
||||||
|
Name = "ens18";
|
||||||
|
};
|
||||||
|
address = [
|
||||||
|
"10.42.10.6/24"
|
||||||
|
"2a01:4f8:1c0c:8221::6/64"
|
||||||
|
];
|
||||||
|
gateway = [
|
||||||
|
"10.42.10.1"
|
||||||
|
"2a01:4f8:1c0c:8221::1"
|
||||||
|
];
|
||||||
|
dns = [
|
||||||
|
"10.42.10.8"
|
||||||
|
"2a01:4f8:1c0c:8221::8"
|
||||||
|
];
|
||||||
|
};
|
||||||
|
|
||||||
|
links."20-vlan132" = {
|
||||||
|
matchConfig.MACAddress = "4e:9e:f3:3e:ed:36";
|
||||||
|
linkConfig.Name = "vlan132";
|
||||||
|
};
|
||||||
|
networks."20-vlan132" = {
|
||||||
|
matchConfig = {
|
||||||
|
Name = "vlan132";
|
||||||
|
};
|
||||||
|
address = [ "10.42.132.1/24" ];
|
||||||
|
};
|
||||||
|
|
||||||
|
links."20-vlan133" = {
|
||||||
|
matchConfig.MACAddress = "86:3c:c7:51:c4:82";
|
||||||
|
linkConfig.Name = "vlan133";
|
||||||
|
};
|
||||||
|
networks."20-vlan133" = {
|
||||||
|
matchConfig = {
|
||||||
|
Name = "vlan133";
|
||||||
|
};
|
||||||
|
address = [ "10.42.133.1/24" ];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
services.kea.dhcp4 = {
|
||||||
|
settings = {
|
||||||
|
interfaces-config = {
|
||||||
|
interfaces = [ "vlan133" ];
|
||||||
|
};
|
||||||
|
subnet4 = [
|
||||||
|
{
|
||||||
|
id = 133;
|
||||||
|
subnet = "10.42.133.1/24";
|
||||||
|
pools = [
|
||||||
|
{
|
||||||
|
pool = "10.42.133.100 - 10.42.133.240";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
option-data = [
|
||||||
|
{
|
||||||
|
name = "routers";
|
||||||
|
data = "10.42.133.1";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
name = "domain-name-servers";
|
||||||
|
data = "10.42.10.8";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
}
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
|
||||||
|
# This value determines the NixOS release from which the default
|
||||||
|
# settings for stateful data, like file locations and database versions
|
||||||
|
# on your system were taken. It‘s perfectly fine and recommended to leave
|
||||||
|
# this value at the release version of the first install of this system.
|
||||||
|
# Before changing this value read the documentation for this option
|
||||||
|
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
|
||||||
|
system.stateVersion = "22.05"; # Did you read the comment?
|
||||||
|
|
||||||
|
}
|
37
hosts/yate/hardware-configuration.nix
Normal file
37
hosts/yate/hardware-configuration.nix
Normal file
@ -0,0 +1,37 @@
|
|||||||
|
# Do not modify this file! It was generated by ‘nixos-generate-config’
|
||||||
|
# and may be overwritten by future invocations. Please make changes
|
||||||
|
# to /etc/nixos/configuration.nix instead.
|
||||||
|
{ config, lib, pkgs, modulesPath, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
imports =
|
||||||
|
[ (modulesPath + "/profiles/qemu-guest.nix")
|
||||||
|
];
|
||||||
|
|
||||||
|
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
|
||||||
|
boot.initrd.kernelModules = [ ];
|
||||||
|
boot.kernelModules = [ ];
|
||||||
|
boot.extraModulePackages = [ ];
|
||||||
|
|
||||||
|
fileSystems."/" =
|
||||||
|
{ device = "/dev/disk/by-uuid/c63fbce0-c409-4c1b-911c-25cd08cc7722";
|
||||||
|
fsType = "ext4";
|
||||||
|
};
|
||||||
|
|
||||||
|
fileSystems."/boot" =
|
||||||
|
{ device = "/dev/disk/by-uuid/B481-41BF";
|
||||||
|
fsType = "vfat";
|
||||||
|
};
|
||||||
|
|
||||||
|
swapDevices = [ ];
|
||||||
|
|
||||||
|
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
|
||||||
|
# (the default) this is the recommended approach. When using systemd-networkd it's
|
||||||
|
# still possible to use this option, but it's recommended to use it in conjunction
|
||||||
|
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
|
||||||
|
networking.useDHCP = lib.mkDefault true;
|
||||||
|
# networking.interfaces.ens18.useDHCP = lib.mkDefault true;
|
||||||
|
|
||||||
|
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
|
||||||
|
}
|
||||||
|
|
23
hosts/yate/voip.nix
Normal file
23
hosts/yate/voip.nix
Normal file
@ -0,0 +1,23 @@
|
|||||||
|
{ config, pkgs, lib, ... }:
|
||||||
|
|
||||||
|
{
|
||||||
|
services.fieldpoc = {
|
||||||
|
enable = true;
|
||||||
|
dhcp = {
|
||||||
|
enable = true;
|
||||||
|
interface = "vlan132";
|
||||||
|
subnet = "10.42.132.0/24";
|
||||||
|
pool = "10.42.132.200 - 10.42.132.250";
|
||||||
|
router = "10.42.132.1";
|
||||||
|
dnsServers = "10.42.10.8";
|
||||||
|
omm = "10.42.132.11";
|
||||||
|
reservations = [
|
||||||
|
{
|
||||||
|
name = "rfp-01";
|
||||||
|
macAddress = "00:30:42:1B:8C:7A";
|
||||||
|
ipAddress = "10.42.132.11";
|
||||||
|
}
|
||||||
|
];
|
||||||
|
};
|
||||||
|
};
|
||||||
|
}
|
Loading…
Reference in New Issue
Block a user