rope/nixos
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Turn mediaserver into a home router

Browse source 
Adds services/router.nix with systemd-networkd (eno1=WAN via DHCP,
eth0=LAN 10.0.0.1/24), nftables (NAT + firewall, default drop on WAN
in), dnsmasq (DHCP only — AdGuard Home keeps :53 for DNS), and sysctl
IP forwarding. NetworkManager is forced off on this host.

Port forwards live in ports.toml at the repo root and are imported via
builtins.fromTOML. Supports single ports, ranges ("26901-26902"), and
"both" protocol. Initial forwards: 22, 80, 443, 26900, 26901-26902.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
This commit is contained in:
ediblerope 2026-04-24 09:48:38 +01:00
parent b6131654ea
commit 77eafded92
3 changed files with 190 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
common.nix
View file

@ -33,6 +33,7 @@
./services/homepage.nix
./services/arr-interconnect.nix
./services/adguard.nix
./services/router.nix
];
### Make build time quicker