diff options
Diffstat (limited to 'modules/nixos/nas.nix')
| -rw-r--r-- | modules/nixos/nas.nix | 101 |
1 files changed, 0 insertions, 101 deletions
diff --git a/modules/nixos/nas.nix b/modules/nixos/nas.nix deleted file mode 100644 index 9cb2067..0000000 --- a/modules/nixos/nas.nix +++ /dev/null @@ -1,101 +0,0 @@ -{ config, pkgs, lib, ... }: - -{ - options = { - client.nas.enable = lib.mkEnableOption "enables nas"; - }; - - config = lib.mkIf config.client.nas.enable { - services.tailscale.enable = true; - services.tailscale.useRoutingFeatures = "client"; - services.tailscale.openFirewall = true; - services.tailscale.extraUpFlags = [ "--accept-dns=false" ]; - networking.nftables.enable = true; - networking.firewall = { - enable = true; - trustedInterfaces = [ "tailscale0" ]; - allowedUDPPorts = [ config.services.tailscale.port ]; - }; - - networking.nftables = { - tables = { - mullvad_tailscale = { - content = '' - chain output { - type route hook output priority 0; policy accept; - ip daddr 100.64.0.0/10 ct mark set 0x00000f41 meta mark set 0x6d6f6c65; - } - ''; - family = "inet"; - }; - }; - }; - - systemd.services.tailscaled.serviceConfig.Environment = [ - "TS_DEBUG_FIREWALL_MODE=nftables" - ]; - - systemd.network.wait-online.enable = false; - boot.initrd.systemd.network.wait-online.enable = false; - - boot.supportedFilesystems = [ "nfs" ]; - - environment.systemPackages = with pkgs; [ - nfs-utils - ]; - - fileSystems."/mnt/data" = { - device = "100.64.0.2:/tank/data"; - fsType = "nfs4"; - - options = [ - "x-systemd.automount" - "noauto" - "nofail" - "_netdev" - - "hard" - "noatime" - - "x-systemd.mount-timeout=10" - "x-systemd.idle-timeout=600" - ]; - }; - - fileSystems."/mnt/backups" = { - device = "100.64.0.2:/tank/backups"; - fsType = "nfs4"; - - options = [ - "x-systemd.automount" - "noauto" - "nofail" - "_netdev" - - "hard" - "noatime" - - "x-systemd.mount-timeout=10" - "x-systemd.idle-timeout=600" - ]; - }; - - fileSystems."/mnt/media" = { - device = "100.64.0.2:/tank/media"; - fsType = "nfs4"; - - options = [ - "x-systemd.automount" - "noauto" - "nofail" - "_netdev" - - "hard" - "noatime" - - "x-systemd.mount-timeout=10" - "x-systemd.idle-timeout=600" - ]; - }; - }; -} |
