52 lines
1.6 KiB
Nix
52 lines
1.6 KiB
Nix
{
|
|
# To get the MAC address of each card, use this command: cat /sys/class/net/*device_name*/address
|
|
# Make sure to use the lower-case hex values in your udev rules. It does not like upper-case.
|
|
wanCardAddress ? "00:0d:b9:48:55:be",
|
|
wireless ? {
|
|
wleInterface = "wlp5s0";
|
|
wleSSID = "hauser";
|
|
# Generate Encrypted Passphrase with: wpa_passphrase <wleSSID> <passphrase>
|
|
wlePassphrase = "a5e42b914b5ad2b7e0474c3b9b35d0843a52668d30cd6aa8650ec43263a60b6e";
|
|
},
|
|
lanInterfaces ? [ "enp2s0" "enp3s0" ],
|
|
lanNetwork ? {
|
|
routerAddress = "10.1.1.1";
|
|
netid = "10.1.1.0";
|
|
revIpDomain = "1.1.10";
|
|
prefixLength = 24;
|
|
domain = "ilanz.fh2.ch";
|
|
dhcpRange = "10.1.1.2,10.1.1.249";
|
|
}
|
|
}:
|
|
|
|
let pkgs = import<nixpkgs>{};
|
|
in
|
|
{
|
|
imports = [
|
|
(import ./networking/wireless-access-point.nix wireless)
|
|
(import ./networking/dns-recursive.nix lanNetwork)
|
|
];
|
|
|
|
# To get the MAC address of each card, use this command: cat /sys/class/net/*device_name*/address
|
|
# Make sure to use the lower-case hex values in your udev rules. It does not like upper-case.
|
|
services.udev.extraRules = ''
|
|
SUBSYSTEM=="net", ACTION=="add", ATTR{address}=="${wanCardAddress}", NAME="wan"
|
|
'';
|
|
|
|
networking = {
|
|
nat = {
|
|
enable = true;
|
|
externalInterface = "wan";
|
|
internalInterfaces = [ "lan" ];
|
|
};
|
|
|
|
bridges.lan.interfaces = lanInterfaces ++ [ wireless.wleInterface ];
|
|
interfaces.lan = {
|
|
ipv4 = {
|
|
addresses = [ { address = lanNetwork.routerAddress; prefixLength = lanNetwork.prefixLength; } ];
|
|
};
|
|
};
|
|
firewall.trustedInterfaces = [ "lan" ];
|
|
};
|
|
|
|
}
|