diff options
| author | Henry J. Webster <hwebs@hwebs.info> | 2026-08-04 17:10:10 -0500 |
|---|---|---|
| committer | Henry J. Webster <hwebs@hwebs.info> | 2026-08-04 17:14:09 -0500 |
| commit | a4c50351f5d55438a102d48c63dcbb62f9ef5e8d (patch) | |
| tree | d52b4c970e607bd9cb30c98acc8d0f7d6ebbcdba /machines/kusanagi/desktop.nix | |
| parent | df960b2ed92f9e45fc4984d19ab65c55074bb1d7 (diff) | |
networking: expose Ollama and mDNS on Wi-Fi LAN
Serve Ollama on kusanagi's Wi-Fi LAN while removing the blanket tailscale0 firewall trust so tailnet traffic follows explicit host firewall rules instead of inheriting every listening service.
Add shared LAN networking for both hosts: allow ping, publish and resolve .local names with Avahi, and scope mDNS to each machine's declared Wi-Fi interface.
Assisted-by: OpenAI:gpt-5
Diffstat (limited to 'machines/kusanagi/desktop.nix')
| -rw-r--r-- | machines/kusanagi/desktop.nix | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/machines/kusanagi/desktop.nix b/machines/kusanagi/desktop.nix index c865844..44b9c81 100644 --- a/machines/kusanagi/desktop.nix +++ b/machines/kusanagi/desktop.nix @@ -22,13 +22,6 @@ drivers = with pkgs; [ gutenprint ]; }; - # mDNS: printer discovery, and resolves kusanagi's *.local NAS names. - services.avahi = { - enable = true; - nssmdns4 = true; - openFirewall = true; - }; - # prevent auto-mounting optical disks services.udisks2.enable = true; |