Move genesis to Proxmox VE

hosts/genesis/networking.nix

@@ -1,15 +1,13 @@
 { pkgs, config, ... }:
 let
-	lan = "enp1s0";
-	wan = "enp2s0";
-	iot = "vlan66";
+	lan = "ens18";
+	iot = "ens19";
 in {
 	greg.tailscale.enable = true;
 
 	# Really, why do I still have to force-disable this crap?
 	boot.kernel.sysctl = {
 		"net.ipv6.conf.${lan}.disable_ipv6" = true;
-		"net.ipv6.conf.${wan}.disable_ipv6" = true;
 		"net.ipv6.conf.${iot}.disable_ipv6" = true;
 		"net.ipv6.conf.lo.disable_ipv6" = true;
 	};
@@ -17,59 +15,31 @@ in {
 	networking = {
 		enableIPv6 = false;
 		networkmanager.enable = pkgs.lib.mkForce false;
-		#defaultGateway = "10.42.1.1";
-		# 100.100.100.100 is the tailscale DNS
+		defaultGateway = "10.42.1.1";
 		nameservers = [
 			"1.1.1.1"
-			#"100.100.100.100"
+			"1.0.0.1"
 			"127.0.0.1"
 		];
 		interfaces = {
-			# This is our WAN port
-			"${wan}" = {
-				useDHCP = true;
-			};
-
 			# This is our LAN port
 			"${lan}" = {
+				useDHCP = false;
 				ipv4.addresses = [ {
-					address = "10.42.1.1";
+					address = "10.42.1.5";
 					prefixLength = 16;
 				} ];
-				useDHCP = false;
 			};
-			wlan0.useDHCP = false;
 
 			"${iot}" = {
 				useDHCP = false;
 				ipv4.addresses = [ {
-					address = "192.168.66.1";
+					address = "192.168.66.250";
 					prefixLength = 24;
 				} ];
 			};
 		};
-
-		vlans = {
-			"${iot}" = {
-				id = 66;
-				interface = lan;
-			};
-		};
-
-		firewall.enable = false;
-		# Router portion here
-		nftables = let
-			myvars = {
-				lanInterfaces = [ lan ];
-				wanInterface = wan;
-				limitedLan = [ iot ];
-				tcpPorts = config.networking.firewall.allowedTCPPorts;
-				udpPorts = config.networking.firewall.allowedUDPPorts;
-			};
-		in {
-			enable = true;
-			rulesetFile = pkgs.template "router.nft" myvars ./nftables.nft;
-		};
+		firewall.enable = true;
 	};
 
 
@@ -83,6 +53,8 @@ in {
 		enable = true;
 		openFirewall = true;
 	};
+	# Used for service auto-disocvery
+	networking.firewall.allowedUDPPorts = [ 1900 7359 ];
 
 	greg.proxies = {
 		"jellyfin.thehellings.lan".target = "http://localhost:8096";