nixos

commit 1673c11d5773d566a9821882b2da7628f9f42282
parent 2693f91f1cbdca7bcfc62138e328575eb021a450
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 27 Jan 2024 20:24:20 +0100

Meow

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
21
++-------------------
M
nixos/worker-2/configuration.nix
 | 
4
++--

2 files changed, 4 insertions(+), 21 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -113,24 +113,7 @@ in {
   # Broken
   systemd.network.wait-online.enable = false;
   systemd.network = {
-    netdevs = {
-      floating1 = {
-        enable = true;
-        netdevConfig = {
-          Kind = "dummy";
-          Name = "floating1";
-        };
-      };
-    };
     networks = {
-      floating1 = {
-        enable = true;
-        name = "floating1";
-        address = [];
-        matchConfig = {
-          Name = "floating1";
-        };
-      };
       "20-v6" = {
         matchConfig = {
           MACAddress = "96:00:02:44:cf:52";
@@ -249,7 +232,7 @@ in {
       ];
     in {
       checkReversePath = "loose";
-      trustedInterfaces = ["floating1" "enp7s0"];
+      trustedInterfaces = ["enp7s0"];
       enable = true;
       allowPing = true;
       allowedTCPPorts = [
@@ -450,7 +433,7 @@ in {
         log syslog all;
 
         filter allowed_ips {
-          if net = 10.0.2.0/24 then accept;
+          if net = 10.0.2.25/32 then accept;
           reject;
         }
 
diff --git a/nixos/worker-2/configuration.nix b/nixos/worker-2/configuration.nix
@@ -226,7 +226,7 @@ in {
       ];
     in {
       checkReversePath = "loose";
-      trustedInterfaces = ["floating1" "enp7s0"];
+      trustedInterfaces = ["enp7s0"];
       enable = true;
       allowPing = true;
       allowedTCPPorts = [
@@ -550,7 +550,7 @@ in {
         log syslog all;
 
         filter allowed_ips {
-          if net = 10.0.2.0/24 then accept;
+          if net = 10.0.2.25/32 then accept;
           reject;
         }