nix-files/modules/universal/net.nix

48 lines
2.0 KiB
Nix
Raw Normal View History

{ config, ... }:
{
# if using router's DNS, these mappings will already exist.
# if using a different DNS provider (which servo does), then we need to explicity provide them.
# ugly hack. would be better to get servo to somehow use the router's DNS
networking.hosts = {
"192.168.0.5" = [ "servo" ];
"192.168.0.20" = [ "lappy" ];
"192.168.0.22" = [ "desko" ];
"192.168.0.48" = [ "moby" ];
};
sops.secrets."nm-community-university" = {
sopsFile = ../../secrets/universal/net/community-university.nmconnection.bin;
format = "binary";
};
sops.secrets."nm-friend-libertarian-dod" = {
sopsFile = ../../secrets/universal/net/friend-libertarian-dod.nmconnection.bin;
format = "binary";
};
sops.secrets."nm-friend-rationalist-empathist" = {
sopsFile = ../../secrets/universal/net/friend-rationalist-empathist.nmconnection.bin;
format = "binary";
};
sops.secrets."nm-home-bedroom" = {
sopsFile = ../../secrets/universal/net/home-bedroom.nmconnection.bin;
format = "binary";
};
sops.secrets."nm-home-shared-24G" = {
sopsFile = ../../secrets/universal/net/home-shared-24G.nmconnection.bin;
format = "binary";
};
sops.secrets."nm-home-shared" = {
sopsFile = ../../secrets/universal/net/home-shared.nmconnection.bin;
format = "binary";
};
environment.etc = {
"NetworkManager/system-connections/nm-community-university".source = config.sops.secrets.nm-community-university.path;
"NetworkManager/system-connections/nm-friend-libertarian-dod".source = config.sops.secrets.nm-friend-libertarian-dod.path;
"NetworkManager/system-connections/nm-friend-rationalist-empathist".source = config.sops.secrets.nm-friend-rationalist-empathist.path;
"NetworkManager/system-connections/nm-home-bedroom".source = config.sops.secrets.nm-home-bedroom.path;
"NetworkManager/system-connections/nm-home-shared-24G".source = config.sops.secrets.nm-home-shared-24G.path;
"NetworkManager/system-connections/nm-home-shared".source = config.sops.secrets.nm-home-shared.path;
};
}