blob: b8ce55fa61bc291e0a96be9306f8e7ebe7434c02 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
|
{ ... }:
{
networking = {
interfaces.ens3.ipv6.addresses = [
{
# Emulate nix-sops. Technically an anti-pattern, but IP addresses aren't real secrets, and this has to be embedded here,
# as we cannot set a file path to read it from.
# Populate/update with:
# SOPS_AGE_KEY=$(doas ssh-to-age -private-key -i /etc/ssh/ssh_host_ed25519_key) sops -d --extract '["ipv6_address"]' secrets/edrahil.yaml | doas tee /root/.config/secrets/ipv6_address
address = builtins.readFile "/root/.config/secrets/ipv6_address";
prefixLength = 64;
}
];
defaultGateway6 = {
address = "fe80::1";
interface = "ens3";
};
};
}
|