office: reenable calibre

[julm/julm-nix.git] / hosts / aubergine / networking / ftth.nix

diff --git a/hosts/aubergine/networking/ftth.nix b/hosts/aubergine/networking/ftth.nix
index 34ca25ac04b367e5412c315140e7b1981a22409b..8088071932838d2540da43625766f1b336d63e60 100644 (file)
--- a/hosts/aubergine/networking/ftth.nix
+++ b/hosts/aubergine/networking/ftth.nix
@@ -1,35 +1,35 @@
-{ pkgs, lib, config, ... }:
+{ lib, ... }:
 with (import ./names-and-numbers.nix);
 {
-networking.interfaces = {
-  ${ftthIface} = {
-    useDHCP = false;
+  networking.interfaces = {
+    ${ftthIface} = {
+      useDHCP = false;
+    };
   };
-};
-networking.networkmanager.unmanaged = [ ftthIface ];
-networking.nftables.ruleset = lib.mkAfter ''
-  table inet filter {
-    chain input {
-      iifname ${ftthIface} jump input-net
-      iifname ${ftthIface} log level warn prefix "input-net: " counter drop
+  networking.networkmanager.unmanaged = [ ftthIface ];
+  networking.nftables.ruleset = lib.mkAfter ''
+    table inet filter {
+      chain input {
+        iifname ${ftthIface} jump input-net
+        iifname ${ftthIface} log level warn prefix "input-net: " counter drop
+      }
+      chain output {
+        oifname ${ftthIface} jump output-net
+        oifname ${ftthIface} log level warn prefix "output-net: " counter drop
+      }
+      chain forward-to-net {
+      }
+      chain forward-from-net {
+      }
+      chain forward {
+        iifname { ${wifiIface}, ${eth1Iface}, ${eth2Iface}, ${eth3Iface} } oifname ${ftthIface} goto forward-to-net
+        iifname ${ftthIface} oifname { ${wifiIface}, ${eth1Iface}, ${eth2Iface}, ${eth3Iface} } goto forward-from-net
+      }
     }
-    chain output {
-      oifname ${ftthIface} jump output-net
-      oifname ${ftthIface} log level warn prefix "output-net: " counter drop
+    table inet nat {
+      chain postrouting {
+        iifname { ${wifiIface}, ${eth1Iface}, ${eth2Iface}, ${eth3Iface} } oifname ${ftthIface} masquerade
+      }
     }
-    chain forward-to-net {
-    }
-    chain forward-from-net {
-    }
-    chain forward {
-      iifname { ${wifiIface}, ${eth1Iface}, ${eth2Iface}, ${eth3Iface} } oifname ${ftthIface} goto forward-to-net
-      iifname ${ftthIface} oifname { ${wifiIface}, ${eth1Iface}, ${eth2Iface}, ${eth3Iface} } goto forward-from-net
-    }
-  }
-  table inet nat {
-    chain postrouting {
-      iifname { ${wifiIface}, ${eth1Iface}, ${eth2Iface}, ${eth3Iface} } oifname ${ftthIface} masquerade
-    }
-  }
-'';
+  '';
 }