caspervk/nixos
1
0
Fork 0
Code Activity Actions

Compare commits

base: caspervk:99190ef423f7c2451637d8fe4a3600c0a036fe1c
Branches Tags
caspervk:master
caspervk:dev
...
compare: caspervk:f30aa9b47dff3d3884b4566ff4f7c60617b071a9
Branches Tags
caspervk:master
caspervk:dev

2 commits
99190ef423 ... f30aa9b47d

Author SHA1 Message Date
Casper V. Kristensen
f30aa9b47d flake.lock: Update 
Flake lock file updates:

• Updated input 'nixos-hardware':
    'github:NixOS/nixos-hardware/184687ae1a3139faa4746168baf071f60d0310c8' (2024-11-11)
  → 'github:NixOS/nixos-hardware/f6581f1c3b137086e42a08a906bdada63045f991' (2024-11-12)
• Updated input 'secrets':
    'git+ssh://git@git.caspervk.net/caspervk/nixos-secrets.git?ref=refs/heads/master&rev=f2d6367a7320e3c597122869f073dc839e56abe9' (2024-11-10)
  → 'git+ssh://git@git.caspervk.net/caspervk/nixos-secrets.git?ref=refs/heads/master&rev=a250fcf99ece2ae6e92713d9cf8b24c98a579320' (2024-11-12)
 2024-11-13 00:06:44 +01:00
Casper V. Kristensen
632b4fda33 tor: new server 2024-11-13 00:06:44 +01:00
5 changed files with 21 additions and 27 deletions
Show stats Expand all files Collapse all files

12
flake.lock
View file

@ -136,11 +136,11 @@
},
"nixos-hardware": {
"locked": {
"lastModified": 1731332224,
"narHash": "sha256-0ctfVp27ingWtY7dbP5+QpSQ98HaOZleU0teyHQUAw0=",
"lastModified": 1731403644,
"narHash": "sha256-T9V7CTucjRZ4Qc6pUEV/kpgNGzQbHWfGcfK6JJLfUeI=",
"owner": "NixOS",
"repo": "nixos-hardware",
"rev": "184687ae1a3139faa4746168baf071f60d0310c8",
"rev": "f6581f1c3b137086e42a08a906bdada63045f991",
"type": "github"
},
"original": {
@ -214,10 +214,10 @@
},
"secrets": {
"locked": {
"lastModified": 1731269025,
"narHash": "sha256-Vq3nNbn2mAO3Ma50leb+LIiFmdUZ1P73CfrT3Znr94g=",
"lastModified": 1731452589,
"narHash": "sha256-GpAaJ+WcJd1BMmQmO4QoCnvXz4s2WWl8AOyRMRRKa24=",
"ref": "refs/heads/master",
"rev": "f2d6367a7320e3c597122869f073dc839e56abe9",
"rev": "a250fcf99ece2ae6e92713d9cf8b24c98a579320",
"revCount": 47,
"type": "git",
"url": "ssh://git@git.caspervk.net/caspervk/nixos-secrets.git"

2
hosts/tor/default.nix
View file

@ -14,7 +14,7 @@
loader = {
grub = {
enable = true;
device = "/dev/vda";
device = "/dev/sda";
};
};
initrd.luks.devices.crypted.device = "/dev/disk/by-label/crypted";

2
hosts/tor/hardware.nix
View file

@ -9,7 +9,7 @@
(modulesPath + "/profiles/qemu-guest.nix")
];
boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "virtio_pci" "sr_mod" "virtio_blk"];
boot.initrd.availableKernelModules = ["ata_piix" "uhci_hcd" "virtio_pci" "virtio_scsi" "sr_mod" "virtio_blk"];
boot.initrd.kernelModules = ["dm-snapshot"];
boot.kernelModules = [];
boot.extraModulePackages = [];

22
hosts/tor/network.nix
View file

@ -8,21 +8,19 @@
systemd.network = {
networks."10-lan" = {
# IPv4 settings are from `sudo dhcpcd --test`.
# IPv6 settings are from https://www.ssdvps.dk/knowledgebase/18/IPv6-Gateway.html.
matchConfig.Name = "ens3";
matchConfig.Name = "enp0s18";
address = [
"91.210.59.57/25"
"2a12:bec4:11d3:de9f::1/64"
"185.231.102.51/24"
"2a0c:5700:3133:650:b0ea:eeff:fedb:1f7b/64"
];
routes = [
{routeConfig = {Gateway = "91.210.59.1";};}
{
routeConfig = {
Gateway = "2a12:bec4:11d3::1";
GatewayOnLink = true;
};
}
{routeConfig = {Gateway = "185.231.102.1";};}
# {
# routeConfig = {
# Gateway = "fe80::200:5eff:fe00:20c";
# GatewayOnLink = true;
# };
# }
];
};
};

10
hosts/tor/tor.nix
View file

@ -1,8 +1,4 @@
{
config,
pkgs,
...
}: {
{pkgs, ...}: {
services.tor = {
enable = true;
openFirewall = true;
@ -15,11 +11,11 @@
ContactInfo = "admin@caspervk.net";
ORPort = [
{
addr = "91.210.59.57";
addr = "185.231.102.51";
port = 443;
}
{
addr = "[2a12:bec4:11d3:de9f::1]";
addr = "[2a0c:5700:3133:650:b0ea:eeff:fedb:1f7b]";
port = 443;
}
];