upRootNutrition/dotfiles
upRootNutrition/dotfiles
1
0
Fork 0
mirror of https://gitlab.com/upRootNutrition/dotfiles.git synced 2025-12-07 13:32:15 -06:00
Code Issues Projects 1 Releases Packages Wiki Activity Actions

test: vaultwarden microVM

Browse source
This commit is contained in:
Nick 2025-11-08 00:57:17 -06:00
parent 304d353a1f
commit c28d5398c4
1 changed files with 19 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

23
systems/ceres/config/networking.nix
View file

@ -13,9 +13,11 @@ in
microvm.host.enable = true; microvm.host.enable = true;
# # systemd-networkd for bridge management # # systemd-networkd for bridge management
# # NOTE: Not needed for macvtap - only enable if using TAP interfaces
# # TAP requires a bridge on the host, macvtap connects directly to physical interface
# systemd.network.enable = true; # systemd.network.enable = true;
# # Bridge configuration for microVMs # # Bridge configuration for microVMs (only needed for TAP interfaces)
# systemd.network.netdevs."10-br-vms" = { # systemd.network.netdevs."10-br-vms" = {
# netdevConfig = { # netdevConfig = {
# Name = "br-vms"; # Name = "br-vms";
@ -47,11 +49,24 @@ in
networking = { networking = {
hostName = ceres.name; hostName = ceres.name;
# NetworkManager disabled - using systemd-networkd for bridge management # NetworkManager disabled - using declarative networking
# Having both enabled causes multiple DHCP leases and IP conflicts
networkmanager.enable = false; networkmanager.enable = false;
nftables.enable = true; nftables.enable = true;
useDHCP = lib.mkDefault false; # systemd-networkd handles DHCP via bridge useDHCP = false;
# Declarative interface configuration for the host
interfaces.enp10s0 = {
useDHCP = false;
ipv4.addresses = [
{
address = "192.168.50.240";
prefixLength = 24;
}
];
};
defaultGateway = "192.168.50.1";
nameservers = [ "192.168.50.1" ];
firewall = { firewall = {
enable = true; enable = true;
allowedTCPPorts = [ allowedTCPPorts = [