infra/nix/os/profiles/containers/configuration.nix

{pkgs, ...}: {
  networking.useHostResolvConf = false;

  networking.firewall.enable = true;
  networking.nftables.enable = true;
  networking.nftables.flushRuleset = true;

  environment.systemPackages = [
    pkgs.dnsutils
  ];

  imports = [
    ../../snippets/systemd-resolved.nix
    ../../snippets/nix-settings.nix
    # ../../modules/ddclient-ovh.nix
    # ../../modules/ddclient-hetzner.nix
  ];
}
sj-srv1,containers: debug and streamline networking config; update and track forgejo here after an update to nixpkgs on sj-srv1 the networking for the `webserver` container wasn't working. this caused me to debug the situation and changing lots of things around. the culprit was most likely some impure state file on the server that caused the `ve-webserver` interface not to persist its IP. after renaming the webserver container the problem went away. i reverted all the IP changes and am keeping the other changes as opporunistic improvements 2024-07-26 18:02:15 +02:00			`{pkgs, ...}: {`
srv0: use systemd-resolved 2022-03-20 16:40:47 +01:00			`networking.useHostResolvConf = false;`

sj-srv1,containers: debug and streamline networking config; update and track forgejo here after an update to nixpkgs on sj-srv1 the networking for the `webserver` container wasn't working. this caused me to debug the situation and changing lots of things around. the culprit was most likely some impure state file on the server that caused the `ve-webserver` interface not to persist its IP. after renaming the webserver container the problem went away. i reverted all the IP changes and am keeping the other changes as opporunistic improvements 2024-07-26 18:02:15 +02:00			`networking.firewall.enable = true;`
			`networking.nftables.enable = true;`
			`networking.nftables.flushRuleset = true;`

			`environment.systemPackages = [`
			`pkgs.dnsutils`
			`];`

[BROKEN DYNDNS] feat(containers): switch to hetzner for primary domain 2023-08-08 17:53:01 +02:00			`imports = [`
sj-vps-htz0,containers/dns: remove IPv6, opportunistic TLS 2023-11-25 09:19:31 +01:00			`../../snippets/systemd-resolved.nix`
fix(*): adapt to nixos-24.05 changes 2024-06-01 21:46:09 +02:00			`../../snippets/nix-settings.nix`
feat(router0-dmz0): init bpir3 based router 2023-08-10 21:45:49 +02:00			`# ../../modules/ddclient-ovh.nix`
			`# ../../modules/ddclient-hetzner.nix`
[BROKEN DYNDNS] feat(containers): switch to hetzner for primary domain 2023-08-08 17:53:01 +02:00			`];`
nix/os/containers: add new profile 2019-02-03 14:31:21 +01:00			`}`