..

hosts/mac.nix

@@ -1,4 +1,4 @@
-{ pkgs, inputs, ... }: let
+{ secretsDir, pkgs, inputs, ... }: let
 
 myobs = pkgs.wrapOBS {
   plugins = with pkgs.obs-studio-plugins; [
@@ -16,13 +16,13 @@ in {
     ../common/building.nix
 
 		inputs.home-manager.nixosModules.home-manager
+    inputs.networkmanager.nixosModules.networkmanager
     ../users/me/headless.nix
     ../users/root/default.nix
   ];
 
 	networking.hostName = "mac";
   networking.firewall.enable = false;
-	networking.useDHCP = true;
   services.avahi = {
       enable = true;
       nssmdns = true;
@@ -35,6 +35,30 @@ in {
         workstation = true;
       };
   };
+	networking.firewall.allowedTCPPorts = [
+		8888 # for general usage
+		9999 # for general usage
+    6000 # Xserver
+    5900 # vnc for win VM
+    5901 # vnc
+    5902 # vnc
+    4400 # rdp win VM
+	];
+
+  boot.kernelModules = [ "usbip_core" ];
+  boot.extraModprobeConfig = "options kvm_intel nested=1";
+
+  # to build rpi images
+  boot.binfmt.emulatedSystems = [ 
+    "aarch64-linux"
+  ];
+
+  virtualisation.libvirtd = {
+    enable = true;
+    qemuOvmf = true;
+    qemuSwtpm = true;
+    #qemuOvmfPackage = pkgs.OVMFFull;
+  };
 
 	# Use the GRUB 2 boot loader.
 	boot.loader.grub = {
@@ -48,6 +72,7 @@ in {
   };
 
   environment.systemPackages = with pkgs; [
+    passt
     mount
     pkgs.hicolor-icon-theme
     efibootmgr
@@ -154,4 +179,112 @@ in {
 
   systemd.defaultUnit = "graphical.target";
 
+
+  ############################# networkmanager
+  networking.networkmanager.enable = true;
+
+  networking.networkmanager.profiles = {
+    home = {
+      connection = {
+        id = "home";
+        uuid = "a02273d9-ad12-395e-8372-f61129635b6f";
+        type = "ethernet";
+        autoconnect-priority = "-999";
+        interface-name = "enp2s0";
+      };
+      ipv4 = {
+        address1 = "192.168.1.33/24,192.168.1.1";
+        dns = "1.1.1.1;";
+        method = "manual";
+      };
+    };
+
+    pw = {
+      connection = {
+        id = "pw";
+        uuid = "e0103dac-7da0-4e32-a01b-487b8c4c813c";
+        type = "wifi";
+        interface-name = "wlp3s0";
+      };
+
+      wifi = {
+        hidden = "true";
+        mode = "infrastructure";
+        ssid = builtins.readFile "${secretsDir}/wifi-ssid";
+      };
+
+      wifi-security = {
+        key-mgmt = "wpa-psk";
+        psk = builtins.readFile "${secretsDir}/wifi-password";
+      };
+
+      ipv4 = {
+        #address1 = "192.168.20.11/24";
+        dns = "1.1.1.1;8.8.8.8;";
+        method = "auto";
+      };
+    };
+
+    hot = {
+      connection = {
+        id = "hot";
+        uuid = "ab51de8a-9742-465a-928b-be54a83ab6a3";
+        type = "wifi";
+        autoconnect = false;
+        interface-name = "wlp3s0";
+      };
+      wifi = {
+        mac-address = "0C:96:E6:E3:64:03";
+        mode = "ap";
+        ssid = "c2vi-mac";
+      };
+
+      ipv4 = {
+        method = "shared";
+      };
+    };
+
+    share = {
+      connection = {
+        id = "share";
+        uuid = "f55f34e3-4595-4642-b1f6-df3185bc0a04";
+        type = "ethernet";
+        autoconnect = false;
+        interface-name = "enp2s0";
+      };
+
+      ethernet = {
+        mac-address = "C8:2A:14:0B:7F:3D";
+      };
+
+      ipv4 = {
+        address1 = "192.168.4.1/24";
+        method = "shared";
+      };
+
+      ipv6 = {
+        addr-gen-mode = "stable-privacy";
+        method = "auto";
+      };
+    };
+
+    dhcp = {
+      connection = {
+        id = "dhcp";
+        uuid = "c006389a-1697-4f77-91c3-95b466f85f13";
+        type = "ethernet";
+        autoconnect = "false";
+        interface-name = "enp2s0";
+      };
+
+      ethernet = {
+        mac-address = "C8:2A:14:0B:7F:3D";
+      };
+
+      ipv4 = {
+        method = "auto";
+      };
+    };
+
+  };
 }