Compare commits

...

2 commits

Author SHA1 Message Date
Casper V. Kristensen f68a64f966 disable wait-online 2024-06-11 01:13:51 +02:00
Casper V. Kristensen c549159d10 sorting is hard 2024-06-11 01:13:12 +02:00
3 changed files with 17 additions and 20 deletions

View file

@ -142,40 +142,40 @@
interfaces = {
"enp5s0" = {
allowedTCPPorts = [
1234 # ad hoc
1337 # ad hoc
139 # Samba
22000 # syncthing
22 # SSH
25 # Mail SMTP
80 # Caddy
139 # Samba
443 # Caddy
445 # Samba
465 # Mail ESMTP
993 # Mail IMAPS
1234 # ad hoc
1337 # ad hoc
8000 # ad hoc
8080 # ad hoc
80 # Caddy
993 # Mail IMAPS
22000 # syncthing
];
allowedUDPPorts = [
139 # Samba
445 # Samba
21027 # syncthing
22000 # syncthing
445 # Samba
];
};
"wg-sigma-public" = {
allowedTCPPorts = [
1234 # ad hoc
1337 # ad hoc
22000 # syncthing
22 # SSH
25 # Mail SMTP
80 # Caddy
443 # Caddy
465 # Mail ESMTP
993 # Mail IMAPS
1234 # ad hoc
1337 # ad hoc
8000 # ad hoc
8080 # ad hoc
80 # Caddy
993 # Mail IMAPS
22000 # syncthing
];
allowedUDPPorts = [
21027 # syncthing

View file

@ -19,6 +19,11 @@
networking.useNetworkd = true;
systemd.network.enable = true;
# The notion of "online" is a broken concept
# https://github.com/nix-community/srvos/blob/main/nixos/common/networking.nix
systemd.services.NetworkManager-wait-online.enable = false;
systemd.network.wait-online.enable = false;
# systemd-resolved provides DNS resolution to local applications through
# D-Bus, NSS, and a local stub resolver on 127.0.0.53. It implements caching
# and DNSSEC validation. We configure it to only, and always, use

View file

@ -22,12 +22,4 @@
}
];
};
# systemd-networkd-wait-online can timeout and fail if there are no network
# interfaces available for it to manage. When systemd-networkd is enabled but
# a different service is responsible for managing the system's internet
# connection (for example, NetworkManager), this service is unnecessary and
# can be disabled.
# https://search.nixos.org/options?channel=24.05&show=systemd.network.wait-online.enable
systemd.network.wait-online.enable = false;
}