1 files changed, 28 insertions, 14 deletions
diff --git a/common/lan-discovery.nix b/common/lan-discovery.nix
index f12971f..9341245 100644
--- a/common/lan-discovery.nix
+++ b/common/lan-discovery.nix
@@ -1,22 +1,36 @@
 # LAN reachability and mDNS discovery shared by all machines.
-{ ... }:
+{
+  config,
+  lib,
+  ...
+}:
 
+let
+  cfg = config.lanDiscovery;
+in
 {
-  # Allow IPv4 ICMP echo requests so hosts can be found with ping.
-  networking.firewall.allowPing = true;
+  options.lanDiscovery.interface = lib.mkOption {
+    type = lib.types.str;
+    description = "Wi-Fi LAN interface used for mDNS discovery.";
+  };
+
+  config = {
+    # Allow IPv4 ICMP echo requests so hosts can be found with ping.
+    networking.firewall.allowPing = true;
 
-  # Avahi/mDNS: publish <hostname>.local and resolve other *.local LAN names.
-  # Keep the multicast DNS firewall opening scoped to the Wi-Fi LAN interface.
-  networking.firewall.interfaces.wlp8s0.allowedUDPPorts = [ 5353 ];
-  services.avahi = {
-    enable = true;
-    nssmdns4 = true;
-    openFirewall = false;
-    allowInterfaces = [ "wlp8s0" ];
-    publish = {
+    # Avahi/mDNS: publish <hostname>.local and resolve other *.local LAN names.
+    # Keep the multicast DNS firewall opening scoped to the host's Wi-Fi LAN interface.
+    networking.firewall.interfaces.${cfg.interface}.allowedUDPPorts = [ 5353 ];
+    services.avahi = {
       enable = true;
-      addresses = true;
-      workstation = true;
+      nssmdns4 = true;
+      openFirewall = false;
+      allowInterfaces = [ cfg.interface ];
+      publish = {
+        enable = true;
+        addresses = true;
+        workstation = true;
+      };
     };
   };
 }