Compare commits

...

2 commits

Author SHA1 Message Date
Casper V. Kristensen f68a64f966 disable wait-online 2024-06-11 01:13:51 +02:00
Casper V. Kristensen c549159d10 sorting is hard 2024-06-11 01:13:12 +02:00
3 changed files with 17 additions and 20 deletions

View file

@ -142,40 +142,40 @@
interfaces = { interfaces = {
"enp5s0" = { "enp5s0" = {
allowedTCPPorts = [ allowedTCPPorts = [
1234 # ad hoc
1337 # ad hoc
139 # Samba
22000 # syncthing
22 # SSH 22 # SSH
25 # Mail SMTP 25 # Mail SMTP
80 # Caddy
139 # Samba
443 # Caddy 443 # Caddy
445 # Samba 445 # Samba
465 # Mail ESMTP 465 # Mail ESMTP
993 # Mail IMAPS
1234 # ad hoc
1337 # ad hoc
8000 # ad hoc 8000 # ad hoc
8080 # ad hoc 8080 # ad hoc
80 # Caddy 22000 # syncthing
993 # Mail IMAPS
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
139 # Samba 139 # Samba
445 # Samba
21027 # syncthing 21027 # syncthing
22000 # syncthing 22000 # syncthing
445 # Samba
]; ];
}; };
"wg-sigma-public" = { "wg-sigma-public" = {
allowedTCPPorts = [ allowedTCPPorts = [
1234 # ad hoc
1337 # ad hoc
22000 # syncthing
22 # SSH 22 # SSH
25 # Mail SMTP 25 # Mail SMTP
80 # Caddy
443 # Caddy 443 # Caddy
465 # Mail ESMTP 465 # Mail ESMTP
993 # Mail IMAPS
1234 # ad hoc
1337 # ad hoc
8000 # ad hoc 8000 # ad hoc
8080 # ad hoc 8080 # ad hoc
80 # Caddy 22000 # syncthing
993 # Mail IMAPS
]; ];
allowedUDPPorts = [ allowedUDPPorts = [
21027 # syncthing 21027 # syncthing

View file

@ -19,6 +19,11 @@
networking.useNetworkd = true; networking.useNetworkd = true;
systemd.network.enable = true; systemd.network.enable = true;
# The notion of "online" is a broken concept
# https://github.com/nix-community/srvos/blob/main/nixos/common/networking.nix
systemd.services.NetworkManager-wait-online.enable = false;
systemd.network.wait-online.enable = false;
# systemd-resolved provides DNS resolution to local applications through # systemd-resolved provides DNS resolution to local applications through
# D-Bus, NSS, and a local stub resolver on 127.0.0.53. It implements caching # D-Bus, NSS, and a local stub resolver on 127.0.0.53. It implements caching
# and DNSSEC validation. We configure it to only, and always, use # and DNSSEC validation. We configure it to only, and always, use

View file

@ -22,12 +22,4 @@
} }
]; ];
}; };
# systemd-networkd-wait-online can timeout and fail if there are no network
# interfaces available for it to manage. When systemd-networkd is enabled but
# a different service is responsible for managing the system's internet
# connection (for example, NetworkManager), this service is unnecessary and
# can be disabled.
# https://search.nixos.org/options?channel=24.05&show=systemd.network.wait-online.enable
systemd.network.wait-online.enable = false;
} }