nixos/hosts/unstable/icdm-root/networking.nix

{ ... }:
let
  dnsHosts = builtins.concatStringsSep "\n" [ "wiki.icdm.lan 10.42.101.1" ];
in
{
  # If we have to do proxying in Bayonnais, we can start to work on that here
  # networking.proxy.noProxy = "127.0.0.1,localhost,internal.domain";
  networking = {
    hostName = "icdm-root";
    useDHCP = false;
    defaultGateway = "10.42.1.1";
    nameservers = [
      "100.100.100.100"
      "10.42.1.2"
    ];
    enableIPv6 = false;

    interfaces = {
      eno1.ipv4.addresses = [
        {
          address = "10.42.101.1";
          prefixLength = 16;
        }
        {
          address = "10.77.1.2";
          prefixLength = 16;
        }
      ];
    };
    # Allow traffic through
    firewall = {
      enable = true;
      allowedTCPPorts = [ 53 ];
      allowedUDPPorts = [
        53
        67
      ];
    };

    extraHosts = "${dnsHosts}";
  };

  services.dnsmasq = {
    enable = true;
    settings = {
      domain = "icdm.lan";
      dhcp-range = [ "eno1,10.77.1.10,10.77.1.255,255.255.0.0,12h" ];
      dhcp-option = [
        "eno1,option:router,10.77.1.1"
        "eno1,option:dns-server,10.77.1.2,1.1.1.1"
        "eno1,option:domain-search,icdm.lan"
      ];
      expand-hosts = true;
      log-dhcp = true;
      log-queries = true;
      # Upstream servers
      server = [
        "1.1.1.1"
        "8.8.4.4"
      ];
    };
  };
}