cy/nixos-config
cy/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

server down migrate website

Browse source
This commit is contained in:
cy 2024-12-15 15:28:28 -05:00
parent 996687f7a4
commit 558d518286
5 changed files with 34 additions and 37 deletions
Download patch file Download diff file Expand all files Collapse all files

36
hosts/ytnix/default.nix
View file

@ -51,10 +51,12 @@
dns = "none";
wifi.backend = "iwd";
};
nameservers = ["31.59.129.225" "2a0f:85c1:840:2bfb::1"];
# nameservers = ["31.59.129.225" "2a0f:85c1:840:2bfb::1"];
nameservers = ["1.1.1.1"];
resolvconf.enable = true;
firewall = {
allowedUDPPorts = [51820]; # for wireguard
allowedUDPPorts = [51820 443]; # for wireguard
allowedTCPPorts = [80 443];
trustedInterfaces = ["wg0"];
};
};
@ -265,17 +267,23 @@
services.ollama.enable = true;
# wireguard setup
networking.wg-quick.interfaces.wg0 = {
address = ["10.0.0.2/24" "fdc9:281f:04d7:9ee9::2/64"];
privateKeyFile = "/run/secrets/wireguard/private";
peers = [
{
publicKey = "a16/F/wP7HQIUtFywebqPSXQAktPsLgsMLH9ZfevMy0=";
allowedIPs = ["0.0.0.0/0" "::/0"];
endpoint = "31.59.129.225:51820";
persistentKeepalive = 25;
presharedKeyFile = "/run/secrets/wireguard/psk";
}
];
# networking.wg-quick.interfaces.wg0 = {
# address = ["10.0.0.2/24" "fdc9:281f:04d7:9ee9::2/64"];
# privateKeyFile = "/run/secrets/wireguard/private";
# peers = [
# {
# publicKey = "a16/F/wP7HQIUtFywebqPSXQAktPsLgsMLH9ZfevMy0=";
# allowedIPs = ["0.0.0.0/0" "::/0"];
# endpoint = "31.59.129.225:51820";
# persistentKeepalive = 25;
# presharedKeyFile = "/run/secrets/wireguard/psk";
# }
# ];
# };
services.caddy = {
enable = true;
configFile = ./Caddyfile;
logFormat = lib.mkForce "level INFO";
};
}