From a4c50351f5d55438a102d48c63dcbb62f9ef5e8d Mon Sep 17 00:00:00 2001
From: "Henry J. Webster" <hwebs@hwebs.info>
Date: Tue, 4 Aug 2026 17:10:10 -0500
Subject: networking: expose Ollama and mDNS on Wi-Fi LAN

Serve Ollama on kusanagi's Wi-Fi LAN while removing the blanket tailscale0 firewall trust so tailnet traffic follows explicit host firewall rules instead of inheriting every listening service.

Add shared LAN networking for both hosts: allow ping, publish and resolve .local names with Avahi, and scope mDNS to each machine's declared Wi-Fi interface.

Assisted-by: OpenAI:gpt-5
---
 machines/kusanagi/desktop.nix | 7 -------
 1 file changed, 7 deletions(-)

(limited to 'machines/kusanagi/desktop.nix')

diff --git a/machines/kusanagi/desktop.nix b/machines/kusanagi/desktop.nix
index c865844..44b9c81 100644
--- a/machines/kusanagi/desktop.nix
+++ b/machines/kusanagi/desktop.nix
@@ -22,13 +22,6 @@
     drivers = with pkgs; [ gutenprint ];
   };
 
-  # mDNS: printer discovery, and resolves kusanagi's *.local NAS names.
-  services.avahi = {
-    enable = true;
-    nssmdns4 = true;
-    openFirewall = true;
-  };
-
   # prevent auto-mounting optical disks
   services.udisks2.enable = true;
 
-- 
cgit v1.3