diff options
Diffstat (limited to 'config')
| -rw-r--r-- | config/ap.nix | 53 |
1 files changed, 37 insertions, 16 deletions
diff --git a/config/ap.nix b/config/ap.nix index 9721e9b..59d79de 100644 --- a/config/ap.nix +++ b/config/ap.nix @@ -1,15 +1,19 @@ { config, lib, pkgs, ... }: +let + wan-dev = "enp0s25"; + lan-dev = "wlp4s0"; +in { networking.networkmanager.enable = lib.mkForce false; networking.firewall = { enable = lib.mkForce true; - allowedTCPPorts = [ 53 22 ]; - allowedUDPPorts = [ 53 67 68 ]; + allowedTCPPorts = lib.mkForce [ ]; + allowedUDPPorts = lib.mkForce [ ]; allowPing = true; logRefusedConnections = false; checkReversePath = false; - trustedInterfaces = [ "wlp3s0" ]; + trustedInterfaces = [ "${lan-dev}" ]; }; services = { @@ -17,13 +21,21 @@ openssh.passwordAuthentication = false; }; + boot.kernel.sysctl = { + "net.ipv4.conf.all.forwarding" = true; + "net.ipv4.conf.default.forwarding" = true; + "net.ipv6.conf.all.forwarding" = true; + "net.ipv6.conf.default.forwarding" = true; + }; + services.hostapd = { enable = true; - ssid = "donkey kong"; - wpaPassphrase = "bananaicecream"; - interface = "wlp3s0"; + # driver = "iwlwifi"; + ssid = "2c"; + wpaPassphrase = "mintchip"; + interface = "${lan-dev}"; hwMode = "g"; - channel = 1; + channel = 11; extraConfig = '' country_code=US wpa_key_mgmt=WPA-PSK @@ -31,6 +43,17 @@ ''; }; + networking.dhcpcd = { + extraConfig = '' + debug + noipv6rs + interface ${wan-dev} + ipv6rs + ia_na 1 + ia_pd 2 ${lan-dev}/0 + ''; + }; + services.dnsmasq = { enable = true; servers = [ "8.8.8.8" "8.8.4.4" ]; @@ -39,29 +62,27 @@ dhcp-option=option:router,10.64.30.1 dhcp-option=option:dns-server,10.64.30.1 dhcp-option=option:netmask,255.255.255.0 + + dhcp-range=::,constructor:${lan-dev},slaac ''; }; networking.nat = { enable = true; - externalInterface = "enp0s25"; - internalInterfaces = [ "wlp3s0" ]; + externalInterface = "${wan-dev}"; + internalInterfaces = [ "${lan-dev}" ]; # internalIPs = [ "10.0.0.0/24" ]; }; - networking.interfaces.enp0s25 = { + networking.interfaces.${wan-dev} = { + macAddress = "3c:97:0e:19:7e:5c"; useDHCP = true; }; - networking.interfaces.wlp3s0 = { + networking.interfaces."${lan-dev}" = { ipv4.addresses = [ { address = "10.64.30.1"; prefixLength = 24; } ]; }; - - system.requiredKernelConfig = - with config.lib.kernelConfig; [ - (isEnabled "CONFIG_DRIVER_NL80211") - ]; } |