Put a non-authoritative DHCP server on Pulsebert

DHCP is an essential service and Pulsebert is more reliable than
anything in proxmox.
This commit is contained in:
Ehmry - 2021-02-24 14:16:42 +01:00
parent 709d8e278e
commit 6c64ceec62
2 changed files with 19 additions and 2 deletions

View File

@ -86,7 +86,7 @@
}; };
pulsebert = nixosSystem' { pulsebert = nixosSystem' {
modules = [ ./hosts/pulsebert ]; modules = [ ./hosts/pulsebert secrets.nixosModules.dhcp ];
system = "aarch64-linux"; system = "aarch64-linux";
}; };

View File

@ -27,6 +27,7 @@ in {
c3d2 = { c3d2 = {
isInHq = true; isInHq = true;
mapHqHosts = true; mapHqHosts = true;
hq.interface = "eth0";
}; };
nix.buildCores = 4; nix.buildCores = 4;
@ -43,7 +44,14 @@ in {
# List packages installed in system profile. To search, run: # List packages installed in system profile. To search, run:
# $ nix search wget # $ nix search wget
environment.systemPackages = with pkgs; [ wget vim git mpd ncmpcpp raspberrypi-tools ]; environment.systemPackages = with pkgs; [
wget
vim
git
mpd
ncmpcpp
raspberrypi-tools
];
# List services that you want to enable: # List services that you want to enable:
@ -110,6 +118,15 @@ in {
acceptTerms = true; acceptTerms = true;
email = "mail@c3d2.de"; email = "mail@c3d2.de";
}; };
services.dhcpd4 = {
enable = true;
interfaces = [ config.c3d2.hq.interface ];
authoritative = false;
# the leases are defined in the secrets module imported
# at the top-level of this flake
};
services.nginx = { services.nginx = {
enable = true; enable = true;
#recommendedGzipSettings = true; #recommendedGzipSettings = true;