/* Name: https://matrix.fandom.com/wiki/Agent_Jones Type: Physical Hardware: PowerEdge r210 From: 2011 (?) Role: Firewall Notes: Used to have Agent Smith as a partner but it died (Ironically) */ { pkgs, lib, nodes, ... }: let # name of the server, sets teh hostname and record for it name = "agentjones"; ip_pub = "193.1.99.72"; ip_priv = "193.1.99.125"; hostname = "${name}.skynet.ie"; in { imports = [ ./hardware/_base.nix ./hardware/RM001.nix ]; deployment = { targetHost = hostname; targetPort = 22; targetUser = "root"; # somehow ssh from runner to this fails tags = [ "active-firewall" ]; }; skynet_dns.records = [ {record=name; r_type="A"; value=ip_pub; server=true;} {record=ip_pub; r_type="PTR"; value=hostname;} ]; services.skynet_backup = { host = { ip = ip_pub; name = name; }; }; # keep the wired usb connection alive (front panel) networking.interfaces.enp0s29u1u5u2.useDHCP = true; networking.hostName = name; # this has to be defined for any physical servers # vms are defined by teh vm host networking.interfaces = { eno2 = { ipv4.addresses = [ { address = ip_pub; prefixLength = 26; } ]; }; eno1 = { #useDHCP = false; ipv4.addresses = [ { # internal address address = ip_priv; prefixLength = 26; } ]; }; }; # this server is teh firewall skynet_firewall = { # always good to know oneself own = { ip = ip_pub; ports = { tcp = [ # ssh in 22 ]; udp = []; }; }; enable = true; # gonna have to get all the forward = builtins.concatLists ( # using this function "(key: value: value.config.skynet_firewall.forward)" turn the values ointo a list lib.attrsets.mapAttrsToList (key: value: # make sure that anything running this firewall dosent count (recursion otherewise) # firewall may want to open ports in itself but can deal with that later if builtins.hasAttr "skynet_firewall" value.config then ( if value.config.skynet_firewall.enable then [] else value.config.skynet_firewall.forward ) else [] ) nodes ); }; }