🚂

modules/nix/default.nix

@@ -2,6 +2,7 @@
   config,
   lib,
   pkgs,
+  fleetFlake,
   ...
 }: {
   nix = {
@@ -39,18 +40,29 @@
       options = "--delete-older-than 30d";
     };
 
-    buildMachines = [
-      {
-        hostName = "rock5b.fleet";
-        system = "aarch64-linux";
-        maxJobs = 6;
-        speedFactor = 1;
-        supportedFeatures = ["nixos-test" "benchmark" "big-parallel" "kvm"];
-        mandatoryFeatures = [];
-        # sshKey = "/var/lib/hydra/queue-runner/.ssh/id_rsa";
-        sshUser = "root";
-      }
-    ];
+    # buildMachines = [
+    #   {
+    #     hostName = "rock5b.fleet";
+    #     system = "aarch64-linux";
+    #     maxJobs = 6;
+    #     speedFactor = 1;
+    #     supportedFeatures = ["nixos-test" "benchmark" "big-parallel" "kvm"];
+    #     mandatoryFeatures = [];
+    #     # sshKey = "/var/lib/hydra/queue-runner/.ssh/id_rsa";
+    #     sshUser = "root";
+    #   }
+    # ];
     distributedBuilds = true;
+
+    registry = lib.mkForce {
+      nixpkgs.to = {
+        type = "path";
+        path = fleetFlake.inputs.nixpkgsUnstable;
+      };
+      n.to = {
+        type = "path";
+        path = fleetFlake.inputs.nixpkgsUnstable;
+      };
+    };
   };
 }

modules/wireguard-server/default.nix

@@ -10,6 +10,20 @@
   networking.nat.internalInterfaces = ["wg0"];
   networking.firewall = {
     allowedUDPPorts = [51820];
+    interfaces.wg0 = {
+      allowedUDPPortRanges = [
+        {
+          from = 0;
+          to = 65535;
+        }
+      ];
+      allowedTCPPortRanges = [
+        {
+          from = 0;
+          to = 65535;
+        }
+      ];
+    };
   };
 
   networking.wireguard.interfaces = {