Update Hetzner-specific conf

hosts/siit-dc/state.nix

@@ -1,7 +1,9 @@
 { lib, modulesPath, ... }:
 {
+  networking.networkmanager.enable = lib.mkForce false;
+  networking.useDHCP = false;
   systemd.network.enable = true;
-  systemd.network.networks."10-wan" = {
+  systemd.network.networks."30-wan" = {
     matchConfig.Name = "enp1s0";
     networkConfig.DHCP = "no";
     address = [
@@ -20,10 +22,7 @@
   boot.loader = {
     efi.canTouchEfiVariables = false;
     systemd-boot.enable = false;
-    grub = {
+    grub.enable = true;
-      enable = true;
-      devices = [ "/dev/sda" ];
-    };
   };
   system.stateVersion = "25.05";
 

servers/siit-dc.nix

@@ -6,6 +6,8 @@
       siit.default = {
         global.pool6 = "2a01:4f9:c013:bd27:46::/96";
 
+        denylist4 = [ "157.180.86.116/32" ];
+
         # Explicit address mappings
         eamt = [
           {

shared/disko/hetzner-ext4.nix

@@ -5,22 +5,32 @@
         device = "/dev/sda";
         type = "disk";
         content = {
-          type = "table";
+          type = "gpt";
-          format = "msdos";
+          partitions = {
-          partitions = [
+            boot = {
-            {
+              size = "1M";
-              name = "nixos";
+              type = "EF02";
-              part-type = "primary";
+              priority = 1;
-              bootable = true;
+            };
-              start = "1M";
+            ESP = {
-              end = "100%";
+              size = "512M";
+              type = "EF00";
+              content = {
+                type = "filesystem";
+                format = "vfat";
+                mountpoint = "/boot";
+                mountOptions = [ "umask=0077" ];
+              };
+            };
+            root = {
+              size = "100%";
               content = {
                 type = "filesystem";
                 format = "ext4";
                 mountpoint = "/";
               };
-            }
+            };
-          ];
+          };
         };
       };
     };