diff options
| author | yokai <accounts.8ef6c@simplelogin.com> | 2026-08-04 17:05:42 -0500 |
|---|---|---|
| committer | yokai <accounts.8ef6c@simplelogin.com> | 2026-08-04 17:05:42 -0500 |
| commit | a7adbd5063fe7ab428d8174cb9b31bec2c6133d6 (patch) | |
| tree | 6b11a725c098affa8eb7b1b9251112efcd24a1df /machines/kusanagi | |
| parent | b47ca1475decf1a98f10231f0cbeebfb75e7f6ea (diff) | |
common: parameterize LAN discovery interfacekusanagi-ollama-lan-firewall
Let the shared LAN discovery module use each host's Wi-Fi interface instead of assuming kusanagi's wlp8s0 everywhere. Set kusanagi to wlp8s0 and enzo to wlp1s0.
Reuse the same setting for kusanagi's Ollama LAN firewall rule so the service opening stays tied to the declared LAN interface.
Assisted-by: OpenAI:gpt-5
Diffstat (limited to 'machines/kusanagi')
| -rw-r--r-- | machines/kusanagi/default.nix | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/machines/kusanagi/default.nix b/machines/kusanagi/default.nix index a1d4610..867a5eb 100644 --- a/machines/kusanagi/default.nix +++ b/machines/kusanagi/default.nix @@ -1,7 +1,7 @@ # kusanagi — AMD workstation. Everything here is specific to this machine: # ROCm/GPU, the Focusrite Scarlett audio interface, optical-disc archiving, the # NAS mounts, and the Kavita/Immich/Ollama servers. -{ pkgs, ... }: +{ config, pkgs, ... }: { imports = [ @@ -18,10 +18,11 @@ sandbox.owner = "henz"; networking.hostName = "kusanagi"; + lanDiscovery.interface = "wlp8s0"; # Ollama is served on the Wi-Fi LAN only. Tailscale remains governed by ACLs # plus the host firewall because tailscale0 is not a trusted interface. - networking.firewall.interfaces.wlp8s0.allowedTCPPorts = [ 11434 ]; + networking.firewall.interfaces.${config.lanDiscovery.interface}.allowedTCPPorts = [ 11434 ]; # This value determines the NixOS release from which the default # settings for stateful data, like file locations and database versions |