aboutsummaryrefslogtreecommitdiffstats
path: root/configs
diff options
context:
space:
mode:
Diffstat (limited to 'configs')
-rw-r--r--configs/default.nix20
1 files changed, 20 insertions, 0 deletions
diff --git a/configs/default.nix b/configs/default.nix
index 9d5a7c7..3693318 100644
--- a/configs/default.nix
+++ b/configs/default.nix
@@ -20,9 +20,29 @@
security.acme.certs."code.nomath.org".webroot = "/var/lib/acme/acme-challenge";
security.acme.certs."feed.nomath.org".email = "aforemny@posteo.de";
security.acme.certs."feed.nomath.org".webroot = "/var/lib/acme/acme-challenge";
+ security.acme.certs."grafana.nomath.org".email = "aforemny@posteo.de";
+ security.acme.certs."grafana.nomath.org".webroot = "/var/lib/acme/acme-challenge";
security.acme.certs."nomath.org".email = "aforemny@posteo.de";
security.acme.certs."nomath.org".webroot = "/var/lib/acme/acme-challenge";
security.acme.certs."static.nomath.org".email = "aforemny@posteo.de";
security.acme.certs."static.nomath.org".webroot = "/var/lib/acme/acme-challenge";
networking.firewall.allowedTCPPorts = [ 80 ];
+
+ # TODO IPv6 configuration should be handled by `fysiweb`
+
+ # TODO this is system1-specific
+ networking.nameservers = [
+ "2a01:4ff:ff00::add:1"
+ "2a01:4ff:ff00::add:2"
+ ];
+ networking.interfaces.eth0.ipv6.addresses = [
+ {
+ address = "2a01:4f8:c2c:2203::1";
+ prefixLength = 64;
+ }
+ ];
+ networking.defaultGateway6 = {
+ address = "fe80::1";
+ interface = "eth0";
+ };
}