2 files changed, 48 insertions, 0 deletions
diff --git a/modules/network/default.nix b/modules/network/default.nix
new file mode 100644
index 0000000..444f53c
--- /dev/null
+++ b/modules/network/default.nix
@@ -0,0 +1,37 @@
+{ ... }:
+let
+  private = import ../../config.private.nix;
+in {
+  imports = [ ./ssh.nix ];
+
+  networking = {
+    hostName = "bacchus";
+
+    firewall = {
+      enable = true;
+    };
+
+    networkmanager = {
+      enable = true;
+      # wifi.powersave = true;
+      ensureProfiles.profiles = {
+        home-wifi = {
+          connection = {
+            id = "home-wifi";
+            type = "wifi";
+            autoconnect = true;
+          };
+          wifi = {
+            mode = "infrastructure";
+            ssid = private.wireless.ssid;
+          };
+          wifi-security = {
+            auth-alg = "open";
+            key-mgmt = "wpa-psk";
+            psk = private.wireless.password;
+          };
+        };
+      };
+    };
+  };
+}
diff --git a/modules/network/ssh.nix b/modules/network/ssh.nix
new file mode 100644
index 0000000..e4e5b2a
--- /dev/null
+++ b/modules/network/ssh.nix
@@ -0,0 +1,11 @@
+{ lib, ... }:
+let
+  private = import ../../config.private.nix;
+in {
+  services.sshd.enable = true;
+
+  # Auth
+  # TODO: dont allow via password
+  # openssh.authorizedKeys.keys = private.ssh.authorizedKeys;
+  services.openssh.settings.PermitRootLogin = "yes"; 
+}