1
0

bootstrap host yate

This commit is contained in:
Ember 'n0emis' Keske 2022-07-16 21:32:14 +02:00
parent a3a3502b70
commit 4300a66aaf
No known key found for this signature in database
GPG Key ID: 00FAF748B777CF10
4 changed files with 165 additions and 0 deletions

View File

@ -43,6 +43,10 @@
deployment.targetHost = "nerd.bula22.de";
};
yate = { ... }: {
deployment.targetHost = "yate.bula22.de";
};
pre-router = { config, pkgs, ... }: {
deployment.targetHost = "lightbuffet.bula22.de";
deployment.keys = {

View File

@ -0,0 +1,101 @@
{ config, pkgs, ... }:
{
imports =
[ # Include the results of the hardware scan.
./hardware-configuration.nix
./voip.nix
];
# Use the systemd-boot EFI boot loader.
boot.loader.systemd-boot.enable = true;
boot.loader.efi.canTouchEfiVariables = true;
networking.hostName = "yate";
boot.kernel.sysctl = {
"net.ipv4.conf.all.forwarding" = true;
"net.ipv6.conf.all.forwarding" = true;
};
networking.useNetworkd = true;
systemd.network = {
networks."10-ens18" = {
matchConfig = {
Name = "ens18";
};
address = [
"10.42.10.6/24"
"2a01:4f8:1c0c:8221::6/64"
];
gateway = [
"10.42.10.1"
"2a01:4f8:1c0c:8221::1"
];
dns = [
"10.42.10.8"
"2a01:4f8:1c0c:8221::8"
];
};
links."20-vlan132" = {
matchConfig.MACAddress = "4e:9e:f3:3e:ed:36";
linkConfig.Name = "vlan132";
};
networks."20-vlan132" = {
matchConfig = {
Name = "vlan132";
};
address = [ "10.42.132.1/24" ];
};
links."20-vlan133" = {
matchConfig.MACAddress = "86:3c:c7:51:c4:82";
linkConfig.Name = "vlan133";
};
networks."20-vlan133" = {
matchConfig = {
Name = "vlan133";
};
address = [ "10.42.133.1/24" ];
};
};
services.kea.dhcp4 = {
settings = {
interfaces-config = {
interfaces = [ "vlan133" ];
};
subnet4 = [
{
id = 133;
subnet = "10.42.133.1/24";
pools = [
{
pool = "10.42.133.100 - 10.42.133.240";
}
];
option-data = [
{
name = "routers";
data = "10.42.133.1";
}
{
name = "domain-name-servers";
data = "10.42.10.8";
}
];
}
];
};
};
# This value determines the NixOS release from which the default
# settings for stateful data, like file locations and database versions
# on your system were taken. Its perfectly fine and recommended to leave
# this value at the release version of the first install of this system.
# Before changing this value read the documentation for this option
# (e.g. man configuration.nix or on https://nixos.org/nixos/options.html).
system.stateVersion = "22.05"; # Did you read the comment?
}

View File

@ -0,0 +1,37 @@
# Do not modify this file! It was generated by nixos-generate-config
# and may be overwritten by future invocations. Please make changes
# to /etc/nixos/configuration.nix instead.
{ config, lib, pkgs, modulesPath, ... }:
{
imports =
[ (modulesPath + "/profiles/qemu-guest.nix")
];
boot.initrd.availableKernelModules = [ "ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sd_mod" "sr_mod" ];
boot.initrd.kernelModules = [ ];
boot.kernelModules = [ ];
boot.extraModulePackages = [ ];
fileSystems."/" =
{ device = "/dev/disk/by-uuid/c63fbce0-c409-4c1b-911c-25cd08cc7722";
fsType = "ext4";
};
fileSystems."/boot" =
{ device = "/dev/disk/by-uuid/B481-41BF";
fsType = "vfat";
};
swapDevices = [ ];
# Enables DHCP on each ethernet and wireless interface. In case of scripted networking
# (the default) this is the recommended approach. When using systemd-networkd it's
# still possible to use this option, but it's recommended to use it in conjunction
# with explicit per-interface declarations with `networking.interfaces.<interface>.useDHCP`.
networking.useDHCP = lib.mkDefault true;
# networking.interfaces.ens18.useDHCP = lib.mkDefault true;
hardware.cpu.intel.updateMicrocode = lib.mkDefault config.hardware.enableRedistributableFirmware;
}

23
hosts/yate/voip.nix Normal file
View File

@ -0,0 +1,23 @@
{ config, pkgs, lib, ... }:
{
services.fieldpoc = {
enable = true;
dhcp = {
enable = true;
interface = "vlan132";
subnet = "10.42.132.0/24";
pool = "10.42.132.200 - 10.42.132.250";
router = "10.42.132.1";
dnsServers = "10.42.10.8";
omm = "10.42.132.11";
reservations = [
{
name = "rfp-01";
macAddress = "00:30:42:1B:8C:7A";
ipAddress = "10.42.132.11";
}
];
};
};
}