nilsandClaude Opus 5.5
f01d4c14fb
Installed routers get root's password from router-setup now. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01AeFqV9dZrK6nipHkPfyM4F
54 lines
1.4 KiB
Nix
54 lines
1.4 KiB
Nix
# A bootable appliance image for trying the verity/read-only layout on real
|
|
# hardware (`nix build .#image`, then write image.raw to a disk). Same network
|
|
# shape as examples/desktop: one NIC, LAN untagged, PPPoE on VLAN 1001.
|
|
{ ... }:
|
|
{
|
|
imports = [ ../../modules/image ];
|
|
|
|
networking.hostName = "router";
|
|
# Bump for every build that is meant to be installed as an update.
|
|
system.image.version = "1";
|
|
system.stateVersion = "26.11";
|
|
|
|
# Generic UEFI PC: storage, USB keyboard and NIC drivers in the initrd.
|
|
boot.initrd.availableKernelModules = [
|
|
"ahci"
|
|
"nvme"
|
|
"xhci_pci"
|
|
"usb_storage"
|
|
"sd_mod"
|
|
"virtio_blk"
|
|
"virtio_pci"
|
|
"virtio_scsi"
|
|
];
|
|
|
|
users.users.root.openssh.authorizedKeys.keys = [
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIHqyMLgAhEdnrRrd2CeYbphGDMPq/cBDjFJ4q4ItZusn nils@Nilss-Mac-mini.mch.stinnesbeck.com"
|
|
"ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBFxbNNk87tvMxruuKvrryK7iAdf4xgS4xFqjKejNAI6 nils@nixtop"
|
|
];
|
|
|
|
router = {
|
|
enable = true;
|
|
wan = {
|
|
interface = "enp2s0";
|
|
ipv4 = {
|
|
type = "pppoe";
|
|
pppoe = {
|
|
vlan = 1001;
|
|
username = "CHANGE-ME@isp.example";
|
|
passwordFile = "/var/lib/router/pppoe-password";
|
|
};
|
|
};
|
|
};
|
|
lans.main = {
|
|
interface = "enp2s0";
|
|
internet = true;
|
|
ipv4.address = "192.168.10.1";
|
|
dhcp.pool = {
|
|
start = "192.168.10.100";
|
|
end = "192.168.10.199";
|
|
};
|
|
};
|
|
};
|
|
}
|