lebowski/NixOS
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix builder stuff

Browse source
This commit is contained in:
GammaKinematics 2026-03-30 16:03:17 +07:00
parent 90cff4f16a
commit 43998b73d7
5 changed files with 184 additions and 96 deletions
Download patch file Download diff file Expand all files Collapse all files

19
configuration.nix
View file

@ -11,7 +11,7 @@
./Suckless/suckless.nix
./ryzenadj.nix
# ./virtualisation.nix
# ./Hetzner/setup.nix
./Hetzner/setup.nix
];
nix.settings = {
@ -51,6 +51,19 @@
networking.hostName = "v3";
# Resolve VPN-only services to the WireGuard IP so traffic
# goes through the tunnel and nginx sees a 10.100.0.x source
networking.hosts."10.100.0.1" = [
"vault.axiomania.org"
"music.axiomania.org"
"sync.axiomania.org"
"books.axiomania.org"
"audio.axiomania.org"
"docs.axiomania.org"
"search.axiomania.org"
"home.axiomania.org"
];
networking.networkmanager.enable = true;
hardware.bluetooth.enable = true;
@ -147,13 +160,13 @@
# Profile 1: Internal services only (split tunnel)
networking.wg-quick.interfaces.wg-services = {
autostart = false;
autostart = true;
address = [ "10.100.0.2/24" ];
privateKeyFile = "/etc/wireguard/private.key";
peers = [{
publicKey = "F2hvz4vx9VrM6IZ2zMUG2FMPMCMwmfxGH9qocbe4q3U=";
endpoint = "178.104.15.221:51820";
allowedIPs = [ "10.100.0.0/24" "178.104.15.221/32" ];
allowedIPs = [ "10.100.0.0/24" ];
persistentKeepalive = 25;
}];
};