summaryrefslogtreecommitdiff
path: root/configuration/work/networking.nix
diff options
context:
space:
mode:
Diffstat (limited to 'configuration/work/networking.nix')
-rw-r--r--configuration/work/networking.nix87
1 files changed, 0 insertions, 87 deletions
diff --git a/configuration/work/networking.nix b/configuration/work/networking.nix
deleted file mode 100644
index 99ba8d7..0000000
--- a/configuration/work/networking.nix
+++ /dev/null
@@ -1,87 +0,0 @@
-{ pkgs, config, ... }:
-{
- environment.systemPackages = with pkgs; [
- networkmanager-openvpn
- ];
-
- networking.hostName = "work";
- networking.networkmanager.enable = true;
- networking.networkmanager.dns = "systemd-resolved";
- networking.nameservers = [ "1.1.1.1" ];
-
- services.openvpn.servers = {
- ghostnet = {
- config = ''
- client
- remote 185.57.9.6 1194
- cert ${config.age.secrets.ghostnet-cert.path}
- key ${config.age.secrets.ghostnet-key.path}
- ca ${config.age.secrets.ghostnet-ca.path}
- auth-user-pass ${config.age.secrets.ghostnet-auth-user-pass.path}
- reneg-sec 0
- cipher AES-256-CBC
- comp-lzo adaptive
- dev tun
- proto udp
- remote-cert-tls server
- tls-auth ${config.age.secrets.ghostnet-tls-auth.path} 1
- nobind
- auth-nocache
- script-security 2
- persist-key
- persist-tun
- user nm-openvpn
- group nm-openvpn
- '';
- updateResolvConf = false;
- autoStart = false;
- };
- systems = {
- config = ''
- client
- remote 'vpn-v2.one.com'
- cert '${config.age.secrets.systems-cert.path}'
- key '${config.age.secrets.systems-key.path}'
- ca '${config.age.secrets.systems-ca.path}'
- cipher AES-128-CBC
- comp-lzo adaptive
- dev tun
- proto udp
- port 1200
- remote-cert-tls server
- tls-auth '${config.age.secrets.systems-tls-auth.path}' 1
- nobind
- auth-nocache
- script-security 2
- persist-key
- persist-tun
- user nm-openvpn
- group nm-openvpn
- '';
- updateResolvConf = false;
- autoStart = false;
- };
- };
-
- programs.update-systemd-resolved.servers = {
- ghostnet = {
- includeAutomatically = true;
- settings = {
- routeOnlyDomains = [ "hostnetbv.nl." ];
- defaultRoute = false;
- multicastDNS = "no";
- dnsOverTLS = "opportunistic";
- dnssec = "no";
- };
- };
- };
-
- services.resolved = {
- enable = true;
- dnssec = "true";
- domains = [ "~." ];
- fallbackDns = [ "1.1.1.1" ];
- dnsovertls = "opportunistic";
- llmnr = "true";
- };
-}