{ config, pkgs, ... }: { imports = [ ../ai.nix ../autologin.nix ../k8s.nix ../libvirt.nix ../openfortivpn.nix ../packages.nix ../sops-desktop.nix ../ssh.nix ../sudo-nopasswd.nix ### Import GUI modules ../desktop/code.nix ../desktop/dunst.nix ../desktop/kitty.nix ../desktop/packages.nix ../desktop/pipewire.nix ../desktop/qwerty-fr.nix ../desktop/rofi.nix ../desktop/starship.nix ../desktop/virt-manager.nix ../desktop/wayland.nix ### Import Graphics modules ../desktop/nvidia.nix ]; sops = { secrets = { "wireguard_home/publickey" = { }; "wireguard_home/presharedkey" = { }; "wireguard_home/privatekey" = { }; }; }; #services.resolved.enable = false; networking = { #useNetworkd = true; #useHostResolvConf = false; interfaces.enp5s0 = { ipv4.addresses = [ { address = "192.168.0.2"; prefixLength = 24; } ]; }; defaultGateway = { address = "192.168.0.254"; interface = "enp5s0"; }; nameservers = [ #"9.9.9.9" "10.0.0.1" "2001:41d0:303:20da::1" "217.182.138.218" ]; extraHosts = '' #172.18.229.240 test-mycarto.grandbesancon.fr 172.18.21.172 errorpages.grandbesancon.fr #172.18.23.4 dozzle.grandbesancon.fr #172.18.22.206 toto.grandbesancon.fr #172.18.229.3 sso.grandbesancon.fr #172.18.20.37 sso.grandbesancon.fr #172.18.20.229 auth.grandbesancon.fr #172.18.20.181 traefikauth.grandbesancon.fr ''; wireguard = { interfaces = { wg0 = { ips = [ "fc00::2/56" "10.0.0.2/16" ]; listenPort = 51820; privateKeyFile = config.sops.secrets."wireguard_home/privatekey".path; peers = [ { publicKey = "X8D/RhwjpFYXm2DbtC0wY39TrFkdaw7RA7kHhbmOXnw="; presharedKeyFile = config.sops.secrets."wireguard_home/presharedkey".path; allowedIPs = [ "fc00::0/56" "10.0.0.0/16" "10.1.0.0/16" ]; endpoint = "[2001:41d0:303:20da::1]:51820"; persistentKeepalive = 15; } ]; }; }; }; }; environment.systemPackages = [ pkgs.tor-browser ]; }