switched to rtr server

README.md

@@ -1,11 +1,5 @@
 # dn42.nix
 
-## ROA
-
-- https://dn42.burble.com/roa/dn42_roa_bird2_4.conf
-- https://dn42.burble.com/roa/dn42_roa_bird2_6.conf
-
 ## TODO:
 
-- auto update roa
 - push unreachable routes to the kernel

modules/bird2.nix

@@ -38,20 +38,14 @@ in
         roa4 table dnroa4;
         roa6 table dnroa6;
 
-        protocol static static_roa_4 {
-          roa4 {
-            table dnroa4;
-          };
-
-          include "${../resources/roa4.conf}";
-        }
-
-        protocol static static_roa_6 {
-          roa6 {
-            table dnroa6;
-          };
-
-          include "${../resources/roa6.conf}";
+        protocol rpki roa_dn42 {
+          roa4 { table dnroa4; };
+          roa6 { table dnroa6; };
+          remote 127.0.0.1;
+          port 8082;
+          refresh 600;
+          retry 300;
+          expire 7200;
         }
 
         include "${../resources/community_filter.conf}";

modules/default.nix

@@ -6,6 +6,7 @@ in
   imports = [
     ./firewall.nix
     ./bird2.nix
+    ./rtr.nix
   ];
 
   options.networking.dn42 = {

modules/rtr.nix

@@ -0,0 +1,14 @@
+{ pkgs, ... }:
+
+{
+  systemd.services.dn42-stayrtr = {
+    wantedBy = [ "multi-user.target" ];
+    after = [ "network.target" ];
+
+    serviceConfig = {
+      ExecStart = "${pkgs.stayrtr}/bin/stayrtr -cache https://dn42.burble.com/roa/dn42_roa_46.json -checktime=false -bind :8082";
+      DynamicUser = true;
+      User = "dn42-stayrtr";
+    };
+  };
+}