From 7c38a4ddac5fdf73ab0b7f3e7ff80f170d40857f Mon Sep 17 00:00:00 2001
From: Grimmauld <Grimmauld@grimmauld.de>
Date: Tue, 25 Feb 2025 22:46:29 +0100
Subject: [PATCH] ipv6

---
 configuration.nix                               |  5 ++---
 flake.nix                                       |  1 +
 hardening/encrypt-dns.nix                       |  2 ++
 specific/grimm-nixos-server-2/configuration.nix | 15 +++++++++++++++
 4 files changed, 20 insertions(+), 3 deletions(-)

diff --git a/configuration.nix b/configuration.nix
index be9012b..4614f8d 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:
 {
   imports = [
     ./overlays
@@ -18,8 +18,7 @@
   nixpkgs.config.allowUnfree = true;
   zramSwap.enable = true;
   networking.enableIPv6 = true;
-#  zramSwap.memoryPercent = 50;
-
+  
   grimmShared = {
     enable = true;
     locale = true;
diff --git a/flake.nix b/flake.nix
index 5870af4..16ef737 100644
--- a/flake.nix
+++ b/flake.nix
@@ -156,6 +156,7 @@
             ./modules
             home-manager.nixosModules.home-manager
             ./hm
+            ./hardening/encrypt-dns.nix
           ];
         };
       };
diff --git a/hardening/encrypt-dns.nix b/hardening/encrypt-dns.nix
index f50e7c0..3817c24 100644
--- a/hardening/encrypt-dns.nix
+++ b/hardening/encrypt-dns.nix
@@ -7,6 +7,8 @@
     networkmanager.dns = "none"; # nm
     resolvconf.useLocalResolver = true; # resoved
   };
+  
+  services.kresd.enable = lib.mkForce false;
 
   services.tor = {
     enable = true;
diff --git a/specific/grimm-nixos-server-2/configuration.nix b/specific/grimm-nixos-server-2/configuration.nix
index 03870e4..d085dc6 100644
--- a/specific/grimm-nixos-server-2/configuration.nix
+++ b/specific/grimm-nixos-server-2/configuration.nix
@@ -11,6 +11,21 @@
   programs.git.enable = true;
   programs.nh.flake = lib.mkForce "/home/grimmauld/grimm-nixos-laptop";
 
+  networking = {
+    interfaces.ens18 = {
+      ipv6.addresses = [
+        {
+          address = "2a02:c206:3015:8531::1";
+          prefixLength = 64;
+        }
+      ];
+    };
+    defaultGateway6 = {
+      address = "fe80::1";
+      interface = "ens18";
+    };
+  };
+
   boot.tmp.cleanOnBoot = true;
   zramSwap.enable = true;
   networking.hostName = "grimm-nixos-server-2";