Switch to vlans in place of static IPs

flake.nix

@@ -77,7 +77,7 @@
       kitty = mkNix [ ./hosts/kitty ]; # Dell Optiplex 7010
       prophet = mkNix [ ./hosts/prophet ]; # Oracle Neoverse-N1
 
-      droid = mkNix [ ./hosts/tower ]; # Android Virtualization Framework
+      droid = mkNix [ ./hosts/droid ]; # Android Virtualization Framework
     };
 
     # nh home switch /path -c arch

hosts/intuos/default.nix

@@ -12,14 +12,14 @@
   networking = {
     hostName = "intuos";
     wireless.enable = true;
-    interfaces."wlp1s0".ipv4.addresses = [{
-      address = "10.2.0.101";
+    vlans.internal = {
+      id=100;
+      interface="wlp1s0";
+    };
+    interfaces.internal.ipv4.addresses = [{
+      address = "11.0.0.102";
       prefixLength = 8;
     }];
-    defaultGateway = {
-      address = "10.1.0.1";
-      interface = "wlp1s0";
-    };
   };
 
   system = {

hosts/kitty/default.nix

@@ -13,14 +13,14 @@
   networking = {
     hostName = "kitty";
     hostId = "8745e22e";
-    interfaces."eno1".ipv4.addresses = [{
-      address = "10.2.0.2";
+    vlans.internal = {
+      id=100;
+      interface="eno1";
+    };
+    interfaces.internal.ipv4.addresses = [{
+      address = "11.0.0.1";
       prefixLength = 8;
     }];
-    defaultGateway = {
-      address = "10.1.0.1";
-      interface = "eno1";
-    };
   };
 
   system = {

hosts/midas/default.nix

@@ -15,14 +15,14 @@
   networking = {
     hostName = "midas";
     hostId = "38ba3f57";
-    interfaces."enp0s31f6".ipv4.addresses = [{
-      address = "10.2.0.1";
+    vlans.internal = {
+      id=100;
+      interface="enp0s31f6";
+    };
+    interfaces.internal.ipv4.addresses = [{
+      address = "11.0.0.1";
       prefixLength = 8;
     }];
-    defaultGateway = {
-      address = "10.1.0.1";
-      interface = "enp0s31f6";
-    };
   };
 
   system = {

hosts/tower/default.nix

@@ -12,14 +12,14 @@
 
   networking = {
     hostName = "tower";
-    interfaces."enp42s0".ipv4.addresses = [{
-      address = "10.2.0.100";
+    vlans.internal = {
+      id=100;
+      interface="enp42s0";
+    };
+    interfaces.internal.ipv4.addresses = [{
+      address = "11.0.0.100";
       prefixLength = 8;
     }];
-    defaultGateway = {
-      address = "10.1.0.1";
-      interface = "enp42s0";
-    };
   };
 
   system = {

modules/system/devices/disks/filesystems/default.nix

@@ -1,4 +1,4 @@
-{ config, ... }:
+{ config, lib, ... }:
 {
   boot = {
     supportedFilesystems = {
@@ -11,7 +11,7 @@
     };
   };
 
-  services = {
+  services = lib.mkIf config.environment.persistence."/persist".enable {
     btrfs.autoScrub.enable = true;
     fstrim.enable = true;
   };

modules/system/devices/networking/default.nix

@@ -18,7 +18,6 @@
 
   services.resolved = {
     enable = true;
-    dnssec = "true";
     dnsovertls = "true";
     fallbackDns = config.networking.nameservers;
   };