Add lib/yggdrasil.nix

Enable yggdrasil for pulsebert

.gitmodules

@@ -1,3 +1,6 @@
 [submodule "secrets"]
 	path = secrets
 	url = ssh://git@gitea.c3d2.de:2222/c3d2-admins/secrets.git
+[submodule "overlays/yggdrasil-package-nix"]
+	path = overlays/yggdrasil-package-nix
+	url = https://github.com/ehmry/yggdrasil-package-nix.git

hosts/hydra/configuration.nix

@@ -7,6 +7,7 @@
     ./hydra.nix
     ./cache.nix
     ./../../lib/common/c3d2.nix
+    ./../../lib/yggdrasil.nix
   ];
 
   security.pam.enableSSHAgentAuth = true;

hosts/pulsebert/configuration.nix

@@ -15,6 +15,7 @@ in {
       ../../lib/common/common.nix
       ../../lib/users.nix
       ../../lib/mpd.nix
+      ../../lib/yggdrasil.nix
     ];
 
   # Use the systemd-boot EFI boot loader.

lib/yggdrasil.nix

@@ -0,0 +1,22 @@
+{ config, ... }: {
+
+  imports = [ ./../overlays/yggdrasil-package-nix/nixos-module.nix ];
+
+  networking.firewall.extraCommands = ''
+   ip6tables -A INPUT -s fe80::/10 -j ACCEPT
+  '';
+
+  services.yggdrasil = {
+    enable = true;
+    Peers = [
+      "tcp://5.9.112.248:39444"
+      "tcp://159.69.35.16:31337"
+      "tcp://195.201.93.98:17177"
+    ];
+    NodeInfo = {
+      name = config.networking.hostName + ".c3d2";
+      deployment = "nixos";
+      location = "Pieschen (Q8945)";
+    };
+  };
+}

overlays/yggdrasil-package-nix

@@ -0,0 +1 @@
+Subproject commit a0ee45162f90401acc52f929a7544838ec13a309