From 6513755670892983db88a6633b8c1ea6019c03d1 Mon Sep 17 00:00:00 2001
From: Ben Sima <ben@bsima.me>
Date: Fri, 15 Nov 2024 14:55:37 -0500
Subject: Re-namespace some stuff to Omni

I was getting confused about what is a product and what is internal
infrastructure; I think it is good to keep those things separate. So I moved a
bunch of stuff to an Omni namespace, actually most stuff went there. Only things
that are explicitly external products are still in the Biz namespace.
---
 Omni/Dev/Networking.nix | 44 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 Omni/Dev/Networking.nix

(limited to 'Omni/Dev/Networking.nix')

diff --git a/Omni/Dev/Networking.nix b/Omni/Dev/Networking.nix
new file mode 100644
index 0000000..c89add7
--- /dev/null
+++ b/Omni/Dev/Networking.nix
@@ -0,0 +1,44 @@
+{ ... }:
+
+let ports = import ../Cloud/Ports.nix;
+in {
+  networking = {
+    nameservers = [ "1.1.1.1" ];
+    hostName = "lithium";
+    hosts = { "::1" = [ "localhost" "ipv6-localhost" "ipv6-loopback" ]; };
+
+    firewall = {
+      allowedTCPPorts = [
+        ports.bitcoind
+        ports.bitcoind-rpc
+        ports.delugeWeb
+        ports.et
+        ports.gemini
+        ports.git
+        ports.http
+        ports.https
+        ports.jellyfin
+        ports.jupyter
+        ports.k3s
+        ports.mpd
+        ports.mpd-stream
+        ports.murmur
+        ports.radicale
+        ports.sabten
+        ports.ssh
+        ports.stableDiffusion
+        ports.tor
+      ];
+      allowedTCPPortRanges = [ ports.torrents ports.httpdev ];
+      allowedUDPPorts = [ ports.dns ports.et ports.murmur ];
+      allowedUDPPortRanges = [ ports.torrents ];
+    };
+
+    # The global useDHCP flag is deprecated, therefore explicitly set to false here.
+    # Per-interface useDHCP will be mandatory in the future, so this generated config
+    # replicates the default behaviour.
+    useDHCP = false;
+    interfaces.enp2s0.useDHCP = true;
+  };
+
+}
-- 
cgit v1.2.3