-1

2configs/default.nix

View file Reviewed

··· 32 32 ./tor-ssh.nix 33 33 ./networkd.nix 34 34 ./pinned-registry.nix 35 35 - ./zerotier.nix 36 35 ./nix.nix 37 36 38 37 # Import stockholm modules

-34

2configs/zerotier.nix

Reviewed

··· 1 1 - { config, lib, ... }: 2 2 - let 3 3 - hosts = lib.mapAttrs (machine: _: { 4 4 - ip = 5 5 - let 6 6 - zerotier_ip_path = 7 7 - config.clan.core.settings.directory + "/vars/per-machine/${machine}/zerotier/zerotier-ip/value"; 8 8 - in 9 9 - if builtins.pathExists zerotier_ip_path then builtins.readFile zerotier_ip_path else null; 10 10 - }) (builtins.readDir ../machines); 11 11 - 12 12 - filteredHosts = lib.filterAttrs (_name: host: host.ip != null) hosts; 13 13 - in 14 14 - { 15 15 - services.zerotierone.joinNetworks = [ "7c31a21e86f9a75c" ]; 16 16 - services.zerotierone.localConf.settings = { 17 17 - interfacePrefixBlacklist = [ 18 18 - "ygg" 19 19 - "mesh" 20 20 - "retiolum" 21 21 - "wiregrill" 22 22 - ]; 23 23 - physical = { 24 24 - "10.243.0.0/16".blacklist = true; 25 25 - "10.244.0.0/16".blacklist = true; 26 26 - "42::/16".blacklist = true; 27 27 - "5d9::/7".blacklist = true; 28 28 - }; 29 29 - }; 30 30 - 31 31 - networking.extraHosts = lib.concatMapStringsSep "\n" (host: "${host.value.ip} ${host.name}.z") ( 32 32 - lib.attrsToList filteredHosts 33 33 - ); 34 34 - }