caspervk/nixos
1
0
Fork 0
Code Actions Activity

tor: new server

Browse source
This commit is contained in:
Casper V. Kristensen 2024-11-12 23:17:36 +01:00
parent 02629a9ba2
commit 632b4fda33
4 changed files with 15 additions and 21 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
hosts/tor/default.nix
View file

@ -14,7 +14,7 @@
loader = { loader = {
grub = { grub = {
enable = true; enable = true;
device = "/dev/vda"; device = "/dev/sda";
}; };
}; };
initrd.luks.devices.crypted.device = "/dev/disk/by-label/crypted"; initrd.luks.devices.crypted.device = "/dev/disk/by-label/crypted";

2
hosts/tor/hardware.nix
View file

@ -9,7 +9,7 @@
(modulesPath + "/profiles/qemu-guest.nix") (modulesPath + "/profiles/qemu-guest.nix")
]; ];
boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk"]; boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sr_mod" "virtio_blk"];
boot.initrd.kernelModules = ["dm-snapshot"]; boot.initrd.kernelModules = ["dm-snapshot"];
boot.kernelModules = []; boot.kernelModules = [];
boot.extraModulePackages = []; boot.extraModulePackages = [];

22
hosts/tor/network.nix
View file

@ -8,21 +8,19 @@
systemd.network = { systemd.network = {
networks."10-lan" = { networks."10-lan" = {
# IPv4 settings are from `sudo dhcpcd --test`. matchConfig.Name = "enp0s18";
# IPv6 settings are from https://www.ssdvps.dk/knowledgebase/18/IPv6-Gateway.html.
matchConfig.Name = "ens3";
address = [ address = [
"91.210.59.57/25" "185.231.102.51/24"
"2a12:bec4:11d3:de9f::1/64" "2a0c:5700:3133:650:b0ea:eeff:fedb:1f7b/64"
]; ];
routes = [ routes = [
{routeConfig = {Gateway = "91.210.59.1";};} {routeConfig = {Gateway = "185.231.102.1";};}
{ # {
routeConfig = { # routeConfig = {
Gateway = "2a12:bec4:11d3::1"; # Gateway = "fe80::200:5eff:fe00:20c";
GatewayOnLink = true; # GatewayOnLink = true;
}; # };
} # }
]; ];
}; };
}; };

10
hosts/tor/tor.nix
View file

@ -1,8 +1,4 @@
{ {pkgs, ...}: {
config,
pkgs,
...
}: {
services.tor = { services.tor = {
enable = true; enable = true;
openFirewall = true; openFirewall = true;
@ -15,11 +11,11 @@
ContactInfo = "admin@caspervk.net"; ContactInfo = "admin@caspervk.net";
ORPort = [ ORPort = [
{ {
addr = "91.210.59.57"; addr = "185.231.102.51";
port = 443; port = 443;
} }
{ {
addr = "[2a12:bec4:11d3:de9f::1]"; addr = "[2a0c:5700:3133:650:b0ea:eeff:fedb:1f7b]";
port = 443; port = 443;
} }
]; ];