feat(mercury): set real IP 10.0.0.10; add services/unbound.nix recursive resolver

This commit is contained in:
erik
2026-07-13 20:01:55 +02:00
parent 894f88c71e
commit 587fcbfa3d
2 changed files with 37 additions and 3 deletions
+5 -3
View File
@@ -6,7 +6,8 @@
{
imports = [
../../common.nix # shared base: user / ssh / nix / firewall
# ../../services/<dns>.nix # add once the DNS service is chosen (below)
../../services/unbound.nix # local recursive resolver (127.0.0.1:5335)
# ../../services/<dns>.nix # add once the adblock DNS engine is chosen (below)
];
networking.hostName = "mercury";
@@ -17,9 +18,10 @@
networking.useDHCP = false;
networking.usePredictableInterfaceNames = false; # keep it named eth0
networking.interfaces.eth0.ipv4.addresses = [
{ address = "10.0.0.2"; prefixLength = 24; } # CHANGE-ME: the Pi's IP
{ address = "10.0.0.10"; prefixLength = 24; } # the Pi's current IP
];
networking.defaultGateway = { address = "10.0.0.1"; interface = "eth0"; }; # CHANGE-ME
# VERIFY with `ip route` on the Pi — assuming the router is .1.
networking.defaultGateway = { address = "10.0.0.1"; interface = "eth0"; };
# Upstream resolvers for the box itself (the adblock DNS forwards to these).
networking.nameservers = [ "1.1.1.1" "9.9.9.9" ];