Commit Graph

12 Commits

Author SHA1 Message Date
wanderer
f1538eef4d
feat: make DNS TLD configurable (#124)
Add a 'domain' option to the NixOS module and JSON config that
controls the domain suffix used for internal DNS names. Defaults to
'hyprspace' for backward compatibility. Supports multi-label domains
(e.g. 'vpn.internal').

Co-authored-by: Max <max@privatevoid.net>
2026-06-22 17:48:14 +00:00
DavHau
6f3c85a1ef
feat: add mDNS peer discovery for LAN environments (#102)
Co-authored-by: Max <max@privatevoid.net>
2026-06-22 14:01:34 +00:00
Max
7e03fcc1d5
make bootstrap peers configurable (#111) 2026-06-18 22:13:10 +00:00
Roland Urbano
f0c30f0769
Add filterPrivateAddresses option to block RFC1918/link-local dials (#101)
* Add filterPrivateAddresses option to block RFC1918/link-local dials (#22)

* Apply suggestion from @max-privatevoid

Co-authored-by: Max <max@privatevoid.net>

* Simplified config parsing

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>

* NewRecursionGater: return connmgr.ConnectionGater

* implement MultiGater

* implement FilterGater

* use MultiGater for private address filtering

---------

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>
Co-authored-by: Max <max@privatevoid.net>
2026-05-18 22:20:44 +02:00
Max
cf2494bf31
nixos: fix default values for acl-related options (#97) 2026-03-26 01:33:25 +01:00
Roland Urbano
ed30c60c95
Implementation for basic service access control (#95)
* Added ServicesACL config

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>

* Adding filter to service receiver

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>

* Implemented ACL handling in ServiceNetwork

Signed-off-by: Roland Urbano <roland.urbano@nts.eu>

* Updated Schema and added parsing for acl config

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>

* Updated service package and fixed ACL handling

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>

* go-jsonschema: 0.16.0 -> 0.22.0

* nixos: set acls on services directly

* config: move ServicesACL to Services

* svc: simplify acl logic

* remove whitespace

* apply nixfmt

---------

Signed-off-by: Roland Urbano <urbano.roland@gmail.com>
Signed-off-by: Roland Urbano <roland.urbano@nts.eu>
Co-authored-by: Max <max@privatevoid.net>
2026-03-25 19:16:52 +01:00
Gerg-L
165bac6c90
remove with lib, use lib.getExe, use runCommand (#42) 2024-06-09 19:53:04 +00:00
Max
64c86d5555
fix: use opt.metricsPort.value (#39) 2024-06-05 18:45:19 +00:00
Max
7bba1f9f82
set empty default value for services option (#36) 2024-06-04 14:45:37 +00:00
Max
bde41b6a3e
Formatting (#31)
* add Nix formatter

* nix fmt

* check that Nix and Go code is formatted correctly

* refactor flake.nix

* add formatter to devShell
2024-06-02 21:45:11 +02:00
Max
ca6c623359
NixOS module (#26)
* init NixOS module

* nixos: open firewall ports

* nixos: add ExecStopPost and ExecReload features

* nixos: expose CLI to users
2024-06-02 20:01:16 +02:00
Max
d97924b908
Documentation (#21)
* add documentation infrastructure

* document service network

* document automatic addressing

* document dns

* document configuration from nixos options
2024-06-01 21:09:08 +02:00