add voyager

hosts/voyager/hardware-configuration.nix

@@ -1,3 +1,4 @@
+
 { config, lib, pkgs, modulesPath, ... }:
 
 {
@@ -5,18 +6,18 @@
     [ (modulesPath + "/installer/scan/not-detected.nix")
     ];
 
-  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usb_storage" "sd_mod" ];
+  boot.initrd.availableKernelModules = [ "xhci_pci" "ahci" "nvme" "usbhid" "usb_storage" "sd_mod" ];
   boot.initrd.kernelModules = [ ];
   boot.kernelModules = [ "kvm-intel" ];
   boot.extraModulePackages = [ ];
 
   fileSystems."/" =
-    { device = "/dev/disk/by-uuid/dfbd029b-d568-41fc-93f3-43a6ac059661";
+    { device = "/dev/disk/by-uuid/9fbbbd3d-29ed-4add-93d7-59cc47dfab35";
       fsType = "ext4";
     };
 
   fileSystems."/boot" =
-    { device = "/dev/disk/by-uuid/1942-B7E9";
+    { device = "/dev/disk/by-uuid/C126-64DE";
       fsType = "vfat";
       options = [ "fmask=0022" "dmask=0022" ];
     };

hosts/voyager/modules/boot.nix

@@ -2,12 +2,12 @@ _:
 {
   boot = {
     loader = {
-      systemd-boot = {
+      systemd-boot.enable = true;
-        enable = true;
+      efi.canTouchEfiVariables = true;
-      };
+    };
-      efi = {
+    kernel.sysctl = {
-        canTouchEfiVariables = true;
+      "net.ipv4.ip_forward" = 1;
-      };
+      "net.ipv6.conf.all.forwarding" = 1;
     };
   };
 }

hosts/voyager/modules/default.nix

@@ -1,13 +1,12 @@
 { config, pkgs, ... }:
 {
   imports = [
-    #./dhcp.nix
-    #./nat.nix
-    #./firewall.nix
     ./users.nix
     ./networking.nix
     ./time.nix
     ./system.nix
     ./boot.nix
+    ./dnsmasq.nix
+    ./ssh.nix
   ];
 }

hosts/voyager/modules/dnsmasq.nix

@@ -0,0 +1,19 @@
+_:
+{
+  services.dnsmasq = {
+    enable = true;
+    settings = {
+      dhcp-range = [ "10.11.1.100,10.11.1.200,12h" ];
+      interface = "enp4s0";
+      
+      server = [ "10.11.0.10" ]; 
+      
+      no-hosts = true;
+      
+      dhcp-option = [
+        "option:router,10.11.0.1"
+        "option:dns-server,10.11.0.10"  
+      ];
+    };
+  };  
+}

hosts/voyager/modules/networking.nix

@@ -2,20 +2,32 @@ _:
 {
   networking = {
     hostName = "voyager";
-    networkmanager = { enable = true; };
+    networkmanager.enable = false;
-    firewall = { enable = false; };
+    useDHCP = false;
 
-    interfaces = { 
+    interfaces.enp3s0 = {
-      eno1 = {
+      useDHCP = true; # WAN DHCP
-        ipv4.addresses = [{
-          address = "10.11.0.10";
-          prefixLength = 24;
-        }];
-      };
     };
-    defaultGateway = {
+
-      address = "10.11.0.1";
+    interfaces.enp4s0 = {
-      interface = "eno1";
+      ipv4.addresses = [{
+        address = "10.11.0.1";
+        prefixLength = 24;
+      }];
+    };
+
+    nat = {
+      enable = true;
+      externalInterface = "enp3s0";  # WAN
+      internalInterfaces = [ "enp4s0" ];  # LAN
+    };
+
+    firewall = {
+      enable = true;
+      
+      extraCommands = ''
+        iptables -A nixos-fw -p tcp --dport 22 -s 10.11.0.0/24 -j ACCEPT
+      '';
     };
   };
 }

hosts/voyager/modules/ssh.nix

@@ -0,0 +1,8 @@
+_:
+{
+  services = {
+    openssh = {
+      enable = true;
+    };
+  };
+}