machines/taupe/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

{ ... }:

{
  imports = [
    ../../modules/common.nix

    # taupe is an egress node in the renard tunnel.
    # it routes traffic towards helsinki, finland.
    ../../modules/tunnel/egress.nix

    ./hardware.nix
    ./devices.nix
  ];

  foundation = {
    www = {
      # a tunnel egress node requires the http/https ports.
      enable = false;

      public = false;
      tailnet = false;
    };

    monitoring.client.enable = false;

    vpn = {
      enable = true;
      externalInterface = "enp1s0";
    };
  };

  system.stateVersion = "25.05";
}