feat(jeeves): centralize firewall configuration

- split networking into interface and firewall modules - define named service ports in one location - remove scattered service-level firewall rules
2026-08-27 16:59:44 -04:00
parent 7e6908ef3d
commit d95b8b99ce
13 changed files with 64 additions and 48 deletions
@@ -0,0 +1,16 @@
+{
+  imports = [
+    ./firewall.nix
+    ./interfaces.nix
+  ];
+  networking = {
+    hostName = "jeeves";
+    hostId = "0e15ce35";
+    useNetworkd = true;
+    # Without this, unconfigured NICs get a catch-all DHCP network and
+    # join the LAN uninvited (how the dead atlantic card ended up
+    # ARP-poisoning 192.168.99.14). Every interface must be configured
+    # explicitly below.
+    useDHCP = false;
+  };
+}