setup stuff for wireguard server/clients

junk.nix

@@ -20,6 +20,7 @@
   boot.loader.grub.device = "/dev/sda"; # or "nodev" for efi only
   boot.kernel.sysctl = {
     "net.ipv6.conf.all.forwarding" = 1;
+    "net.ipv4.ip_forward" = 1;
   };
 
   networking.hostName = "junk"; # Define your hostname.

push-junk.sh

@@ -3,6 +3,6 @@
 scp ./configuration.nix junk:/etc/nixos
 scp ./server.nix junk:/etc/nixos
 scp ./junk.nix junk:/etc/nixos
-scp ./dnsmasq.hosts junk:/
+scp ./private/junk.nix junk:/etc/nixos/private
 
 ssh junk nixos-rebuild switch

workstation.nix

@@ -17,7 +17,7 @@
     shell = pkgs.fish;
   };
   users.users.root.hashedPassword = "!";
-  users.mutableUsers = false;
+  users.mutableUsers = true;
   services.gvfs.enable = true;
 
 #  services.flatpak.enable = true;

x230.nix

@@ -5,6 +5,7 @@
     [ # Include the results of the hardware scan.
       <nixos-hardware/lenovo/thinkpad/x230>
       ./workstation.nix
+      private/x230.nix
     ];
 
   # Use the GRUB 2 boot loader.