Commit Graph

160 Commits

Author SHA1 Message Date
2765dd05e2 nixos-module/container/upstream: try making upstream.noNat.subnets6 actually work 2022-09-18 22:48:25 +02:00
555026dd84 nixos-module/container/upstream: put noNat.subnets4 in proper iptables chain 2022-09-18 19:25:58 +02:00
c356db8bb4 nixos-module/container/wireguard: remove explicit ipv4 default route again
there is one implicitly
2022-09-18 19:09:22 +02:00
7d6f3f521b nixos-module/container/upstream: fix syntax 2022-09-18 19:06:59 +02:00
2133522dc8 nixos-module/container/upstream: disable dhcp6 just for flpk-gw 2022-09-18 18:59:22 +02:00
82594811d4 nixos-module/container/wireguard: set ipv4 default route 2022-09-18 18:54:08 +02:00
9144ef6107 nixos-module/container/wireguard: remove direct RouteTable setting 2022-09-18 16:25:53 +02:00
a5e3abfca6 nixos-module/container/wireguard: brind back wireguardMark 2022-09-18 16:23:18 +02:00
5eb915e4f6 nixos-module/container/wireguard: rename rt_table vpn4 to vpn, add to wg settings 2022-09-18 16:14:38 +02:00
8583b55c0f nixos-module/container/upstream: fix 2022-09-18 14:43:07 +02:00
bd95d81cba ixos-module/container/upstream: fix noNat6 2022-09-18 14:40:44 +02:00
6e01f8c5df nixos-module/container/bird: add flpk ipv6 range unreachable route 2022-09-18 01:58:00 +02:00
5a88fedebe nixos-module/container/bird: add escaping 2022-09-18 01:47:57 +02:00
05641a7f74 flpk-gw: implement upstream.noNat.subnets4 2022-09-18 01:42:34 +02:00
f8c1c17a1d bird: implement ospf.allowedUpstreams6 2022-09-18 01:37:57 +02:00
cd959a1f88
Typo 2022-09-18 01:26:40 +02:00
0449688a76
dnscache: up caching 2022-09-18 01:22:35 +02:00
e000ed1719 nixos-module/container/bird: add flpk-gw to anon1 config 2022-09-18 00:39:25 +02:00
b6ebe0f136 net/flpk: init 2022-09-18 00:17:59 +02:00
1293ab0a75 nixos-module/container/wireguard: make upBandwidth optional 2022-09-18 00:07:10 +02:00
c1b698078b nixos-module/container/upstream/pppoe: remove obsolete dhcpV6 settings 2022-09-15 19:33:38 +02:00
1d2f491a79 nixos-module/container/dhcp-server: add ignore-client-uids 2022-09-14 20:23:55 +02:00
80f8b041a3 nixos-module/container/upstream: fix typo 2022-09-13 01:10:13 +02:00
a7a9def709 nixos-module/container/upstream: fix typo 2022-09-13 01:05:00 +02:00
09e4beb737 nixos-module/container/upstream: catch preexisting iptables chains 2022-08-29 19:46:48 +02:00
c5f57bd8c1 nixos-module/container/upstream: reflect connections to staticIpv4Address 2022-08-29 19:22:39 +02:00
24e979d6bd nixos-module/container/upstream: use internal core ipv4 address for port forwarding reflection 2022-08-27 19:06:39 +02:00
eeef53a268 nixos-module/container/dhcp-server: enhance matching for pxe/efi/rpi4 2022-08-22 23:31:18 +02:00
d4a2f34f18 nix/nixos-module/container/netboot: merge into c3d2/nix-config host nfsroot 2022-08-22 19:54:07 +02:00
6655e5e6a9
Don't block systemd-networkd-wait-online on core interface being stuck in configuring 2022-08-05 22:56:49 +02:00
d8dce5f6da nixos-module/container/upstream/pppoe: fix disabling DHCP 2022-08-05 22:24:09 +02:00
88cadab0f0 entirely remove obsolete upstream1+upstream2 ipv4 subnets 2022-08-05 18:15:00 +02:00
78586ec3f6 nixos-module/container/vpn: allow link-local addrs for ipv6 slaac 2022-07-18 22:43:01 +02:00
32f4b3bd84 nixos-module/container/upstream: prohibit forwarding smtp except for serv 2022-07-12 01:29:09 +02:00
966442a327 nixos-module/container/dhcp-server: change rpi tftp server to nfsroot 2022-06-21 23:10:18 +02:00
22e4e19a5b nixos-module/container/upstream/pppoe: add clamp-mss-to-pmtu for IPv6 2022-06-10 01:15:22 +02:00
4625eef8cb nixos-module/container/dns: remove IFD for obtaining serial
now 100% IFD free
2022-03-26 04:07:00 +01:00
2de02cc5bb *.nix: remove unused code 2022-03-22 18:13:17 +01:00
e16be776bb nixos-module/container/dhcp-server: change RPi4 tftp server from netboot to nix-build 2022-03-22 18:11:04 +01:00
a43c8e99b6 nixos-module/container/{dhcp-server,netboot}: prepare rpi4 netboot 2022-03-13 22:43:43 +01:00
bdca123b99 vpn-gw: init 2022-03-01 22:51:31 +01:00
b75633566d yggdrasil: remove pantoto peering
Peer instead from the pantoto side.
2022-01-18 23:35:48 +01:00
4bb8fe46e2 yggdrasil: change listening port to 1337
1/tcp didn't work :(
2022-01-14 20:37:42 +01:00
b50a051904 yggdrasil: don't listen on ipv4 and fail 2022-01-14 19:30:29 +01:00
64ee9d06bb yggdrasil: listen, add port forwarding on upstream4+upstream1 2022-01-14 19:23:03 +01:00
4bf0e2bf33 yggdrasil: reconfigure peers 2022-01-14 00:54:33 +01:00
6cc02abdb8 yggdrasil: properly add a static key 2022-01-13 23:40:43 +01:00
792426f22c nixos-module/container/yggdrasil: enable NAT66 2022-01-13 20:34:01 +01:00
0e3921d126 Yggdrasil: enable IPv6 forwarding 2022-01-13 20:24:38 +01:00
d8bd90e049 yggdrasil: prepare container deployment 2022-01-13 20:17:50 +01:00