Commit Graph

628 Commits

Author SHA1 Message Date
538905b2d9 pkgs/gateway-report: fix table headings 2022-10-23 00:27:18 +02:00
43a9a97627 homepage: add colors for vpn ini highlighting 2022-10-23 00:27:01 +02:00
02db656e02 doc/vpn: init 2022-10-23 00:16:40 +02:00
8e32678ee6 pkgs/homepage: add config.html 2022-10-23 00:16:40 +02:00
f4ac3f9edb nixos-module/container/dhcp-server: make dhcp.router a flat hostName 2022-10-22 22:41:17 +02:00
9be5565030 lib/config/options: disable isRouter for servers 2022-10-22 22:40:48 +02:00
8e3ca3bc7c pkgs/gateway-report: init 2022-10-22 22:40:33 +02:00
db2d0537e3 lib/dns: fix @.zentralwerk.org records 2022-10-22 21:25:26 +02:00
8fe58d2816 lib/dns: add records for http 2022-10-22 21:19:38 +02:00
1036fdb9fe pkgs/subnetplan: tweak GROUP_PREFIX, add colors 2022-10-22 21:19:38 +02:00
bd3e249b1b pkgs/homepage: init 2022-10-22 21:19:38 +02:00
626d8076bb nixos-module/container/upstream: move clamp-mss-to-pmtu outa pppoe 2022-09-19 21:44:02 +02:00
6a181bbf18 nixos-module/container/upstream: try fixing upstream.noNat.subnets4 2022-09-18 23:02:46 +02:00
8ee629945d nixos-module/container/upstream: remove remnants 2022-09-18 22:52:31 +02:00
2765dd05e2 nixos-module/container/upstream: try making upstream.noNat.subnets6 actually work 2022-09-18 22:48:25 +02:00
75ebd1d3ea lib/dns: add forward records from ctx flpk 2022-09-18 22:28:34 +02:00
555026dd84 nixos-module/container/upstream: put noNat.subnets4 in proper iptables chain 2022-09-18 19:25:58 +02:00
c356db8bb4 nixos-module/container/wireguard: remove explicit ipv4 default route again
there is one implicitly
2022-09-18 19:09:22 +02:00
7d6f3f521b nixos-module/container/upstream: fix syntax 2022-09-18 19:06:59 +02:00
2133522dc8 nixos-module/container/upstream: disable dhcp6 just for flpk-gw 2022-09-18 18:59:22 +02:00
82594811d4 nixos-module/container/wireguard: set ipv4 default route 2022-09-18 18:54:08 +02:00
9144ef6107 nixos-module/container/wireguard: remove direct RouteTable setting 2022-09-18 16:25:53 +02:00
a5e3abfca6 nixos-module/container/wireguard: brind back wireguardMark 2022-09-18 16:23:18 +02:00
5eb915e4f6 nixos-module/container/wireguard: rename rt_table vpn4 to vpn, add to wg settings 2022-09-18 16:14:38 +02:00
da6b2d55fc pkgs/dns-slaves: fix 2022-09-18 15:50:11 +02:00
8583b55c0f nixos-module/container/upstream: fix 2022-09-18 14:43:07 +02:00
bd95d81cba ixos-module/container/upstream: fix noNat6 2022-09-18 14:40:44 +02:00
bf9e28c5dc lib/dns: don't filter for up* 2022-09-18 03:22:57 +02:00
6e01f8c5df nixos-module/container/bird: add flpk ipv6 range unreachable route 2022-09-18 01:58:00 +02:00
5a88fedebe nixos-module/container/bird: add escaping 2022-09-18 01:47:57 +02:00
05641a7f74 flpk-gw: implement upstream.noNat.subnets4 2022-09-18 01:42:34 +02:00
f8c1c17a1d bird: implement ospf.allowedUpstreams6 2022-09-18 01:37:57 +02:00
cd959a1f88
Typo 2022-09-18 01:26:40 +02:00
0449688a76
dnscache: up caching 2022-09-18 01:22:35 +02:00
e000ed1719 nixos-module/container/bird: add flpk-gw to anon1 config 2022-09-18 00:39:25 +02:00
b6ebe0f136 net/flpk: init 2022-09-18 00:17:59 +02:00
1293ab0a75 nixos-module/container/wireguard: make upBandwidth optional 2022-09-18 00:07:10 +02:00
70f63609f6 ap: add explicit ifname for ssids of duplicate nets 2022-09-16 19:19:24 +02:00
0002456abf options, saal aps: turn ZW public back to no encryption, add ssid Datenspuren for owe 2022-09-16 18:57:16 +02:00
4923f7e3ca pkgs/switches/TL-SG3210: fix trunks 2022-09-16 18:44:07 +02:00
6549ef3991 nix/pkgs/openwrt: don't start ping after deployment 2022-09-16 18:39:28 +02:00
186c9e6db3 switch-ds1, switch-ds2: deploy 2022-09-16 18:39:06 +02:00
c1b698078b nixos-module/container/upstream/pppoe: remove obsolete dhcpV6 settings 2022-09-15 19:33:38 +02:00
687e96a02f pkgs/openwrt/uci-config: fix mtu hotfix 2022-09-15 19:33:05 +02:00
3876228a38 pkgs/openwrt/uci-config: add mtu hotfix 2022-09-15 19:19:54 +02:00
fca953a92f pkgs/openwrt/uci-config: remove broken vxlan mtu configuration 2022-09-15 01:16:30 +02:00
1d2f491a79 nixos-module/container/dhcp-server: add ignore-client-uids 2022-09-14 20:23:55 +02:00
747a923774 pkgs/openwrt: install vxlan if needed 2022-09-14 17:47:09 +02:00
ff5d750697 pkgs/openwrt/uci-config: add wifi encryption option 2022-09-14 17:23:13 +02:00
0f9246d4ba pkgs/openwrt: remove even more unneeded default packages 2022-09-13 03:18:55 +02:00
1d4698e6ff pkgs/openwrt: replace packages to fit ap39 flash 2022-09-13 03:18:21 +02:00
516f7426a1 pkgs/openwrt: remove wpad-mini for legacy openwrt 2022-09-13 02:19:02 +02:00
80f8b041a3 nixos-module/container/upstream: fix typo 2022-09-13 01:10:13 +02:00
a7a9def709 nixos-module/container/upstream: fix typo 2022-09-13 01:05:00 +02:00
f89d1fcffb pkgs/openwrt: enable wpa3 and owe 2022-09-12 21:41:40 +02:00
4bbd7b6bee nixos-module/collectd/unbound.rb: make executable 2022-09-12 21:01:29 +02:00
e9f1623694 pkgs/openwrt: update nix-openwrt-imagebuilder feedsSha256 schema 2022-09-12 21:00:58 +02:00
b5334a0859 lib/openwrt-models: work around empty lines 2022-09-12 19:36:03 +02:00
09e4beb737 nixos-module/container/upstream: catch preexisting iptables chains 2022-08-29 19:46:48 +02:00
c5f57bd8c1 nixos-module/container/upstream: reflect connections to staticIpv4Address 2022-08-29 19:22:39 +02:00
24e979d6bd nixos-module/container/upstream: use internal core ipv4 address for port forwarding reflection 2022-08-27 19:06:39 +02:00
f9b865c2dd nixos-module/collectd: fix command name 2022-08-23 03:05:42 +02:00
1b5a599f7c nix/nixos-module/collectd: use security.wrappers for dhcpcount.rb 2022-08-23 03:01:45 +02:00
eeef53a268 nixos-module/container/dhcp-server: enhance matching for pxe/efi/rpi4 2022-08-22 23:31:18 +02:00
2c9d36ff00 nixos-module/defaults: unpin kernel 2022-08-22 19:59:59 +02:00
d4a2f34f18 nix/nixos-module/container/netboot: merge into c3d2/nix-config host nfsroot 2022-08-22 19:54:07 +02:00
6655e5e6a9
Don't block systemd-networkd-wait-online on core interface being stuck in configuring 2022-08-05 22:56:49 +02:00
d8dce5f6da nixos-module/container/upstream/pppoe: fix disabling DHCP 2022-08-05 22:24:09 +02:00
88cadab0f0 entirely remove obsolete upstream1+upstream2 ipv4 subnets 2022-08-05 18:15:00 +02:00
78586ec3f6 nixos-module/container/vpn: allow link-local addrs for ipv6 slaac 2022-07-18 22:43:01 +02:00
8de1eceb44 nixos-module/collectd: fix mqttServer config 2022-07-16 01:32:27 +02:00
fb741b9e3f lib/config/options: fix mqttServer options 2022-07-16 01:31:46 +02:00
5b1c0301d5 nixos-module/collectd: add distribution to mqttServer 2022-07-16 01:29:02 +02:00
32f4b3bd84 nixos-module/container/upstream: prohibit forwarding smtp except for serv 2022-07-12 01:29:09 +02:00
99dbdf23ff nixos-module/defaults: add hydra.hq.c3d2.de to nix.binaryCaches 2022-07-12 00:46:48 +02:00
58eaaff70e server1: fix /boot fsType 2022-07-12 00:17:22 +02:00
868b780cf5 junos: enable lldp 2022-07-12 00:15:07 +02:00
b6da1cf7fb server1: update for reinstallation 2022-07-11 23:41:27 +02:00
7248a43a4b server1: fix syntax 2022-07-11 23:34:51 +02:00
331b5436cc server1: change /boot path 2022-07-11 23:22:59 +02:00
b2913f2d8e nixos-module/collectd/dhcpcount.rb: bump INTERVAL to 300
script generates considerable load :(
2022-06-28 03:22:14 +02:00
547e0e92d3 pkgs/switches/junos: generate password hash 2022-06-27 22:40:14 +02:00
00c57c88bf lib/config/options: add assertions for switch links 2022-06-27 22:09:16 +02:00
0b1219ff7e pkgs/switches/junos: use ssh-ed25519 key 2022-06-27 21:29:23 +02:00
6e2d4c9d0c pkgs/switches/junos: remove useless toString 2022-06-27 03:04:54 +02:00
d7381816f7 pkgs/switches/junos: fix access bonds 2022-06-27 03:01:47 +02:00
ce61ff7f20 pkgs/switches/junos: fix root ssh-rsa 2022-06-27 01:22:17 +02:00
fec671f093 switch-b3: replace switch-b1/b2 2022-06-27 01:04:44 +02:00
675c549095 nixos-module/collectd: fix 2022-06-24 00:05:54 +02:00
a9e617cd63 nixos-module/collectd: let collectd start after dhcpd4 2022-06-24 00:04:41 +02:00
10b8faeb23 pkgs/device-templates: exclude all ap* from all-device-scripts 2022-06-23 23:20:18 +02:00
604b2d3a7a pkgs/switches/linksys-srw2048: fix isBond 2022-06-23 19:40:25 +02:00
04721fc1b6 pkgs/switches/linksys-srw2048: just remove all vlans for non-trunked bonds 2022-06-23 19:22:42 +02:00
f58ff9584a Revert "pkgs/switches/linksys-srw2048: always clear vlan config"
This reverts commit 22aa149f3d.
2022-06-23 19:19:09 +02:00
22aa149f3d pkgs/switches/linksys-srw2048: always clear vlan config 2022-06-23 19:12:02 +02:00
90cd903381 pkgs/switches/linksys-srw2048: implement bonded non-trunked ports 2022-06-23 19:07:54 +02:00
fd6b70d89c pkgs/openwrt: ignore sysupgrade exit code in sshScript 2022-06-23 18:14:27 +02:00
ad02ac3975 pkgs/openwrt: add modelPackages for tplink_archer-c7-v2, ubnt_unifiac-lite 2022-06-23 18:08:59 +02:00
bc764e2526 pkgs/openwrt: switch sshScript to installing the image 2022-06-23 18:08:41 +02:00
942d6a45dc pkgs/openwrt/uci-config: reenable wifi-on-link.sh cronjob 2022-06-23 16:58:53 +02:00
b32f23c318 pkgs/openwrt: init modelPackages with "tplink_archer-c7-v5" 2022-06-23 16:58:17 +02:00
03c2b37596 nixos-module/server: remove outdated nixpkgs-master overwrite for collectd 2022-06-21 23:39:47 +02:00
966442a327 nixos-module/container/dhcp-server: change rpi tftp server to nfsroot 2022-06-21 23:10:18 +02:00
aa0ffa8aa2 lib/config: update extraArgs to _module.args 2022-06-21 17:05:48 +02:00
d88d57cde6 nixos-module/collectd: allow access to dhcpd4 StateDirectory 2022-06-20 01:20:26 +02:00
7344fa925f nixos-module/collectd/dhcpcount.rb: fix path to dhcpd.leases 2022-06-20 01:06:54 +02:00
a0eb8a5f82 nixos-module/defaults: pin kernelPackage to 5.17 for zfs build compatibility 2022-06-10 20:05:19 +02:00
6f8dfc8859 config: remove upstream1 and upstream2 entirely 2022-06-10 18:55:25 +02:00
22e4e19a5b nixos-module/container/upstream/pppoe: add clamp-mss-to-pmtu for IPv6 2022-06-10 01:15:22 +02:00
7f3124b530 pkgs: readability 2022-06-01 01:07:44 +02:00
dd3b956ef4 nix/pkgs: reduce memory hogging by not catching misbuilt openwrt images 2022-05-31 21:57:43 +02:00
e05e9d43cd pkgs: remove all-rootfs to avoid huge evaluations 2022-05-31 20:39:21 +02:00
3ce7ee7411 pkgs/openwrt/uci-config: add /etc/collectd.conf 2022-05-27 02:08:03 +02:00
1854ec5819 openwrt-images: add uci-config 2022-05-27 01:37:03 +02:00
52dbdc237a pkgs/ap: remove dead code 2022-05-05 22:34:17 +02:00
4b09601419 pkgs/openwrt-images: refactor, embed hostName in extraImageName 2022-04-30 02:55:01 +02:00
7a00fd74cf pkgs/openwrt-images: add support for legacy devices 2022-04-30 01:31:56 +02:00
d54bb4f871 lib.getOpenwrtModel: update to newer model naming scheme 2022-04-29 00:54:08 +02:00
f9ce07f65e add nix-openwrt-imagebuilder 2022-04-29 00:49:45 +02:00
598388d428 wlan5-roof: lower mtu 2022-04-04 20:18:46 +02:00
4625eef8cb nixos-module/container/dns: remove IFD for obtaining serial
now 100% IFD free
2022-03-26 04:07:00 +01:00
2de02cc5bb *.nix: remove unused code 2022-03-22 18:13:17 +01:00
e16be776bb nixos-module/container/dhcp-server: change RPi4 tftp server from netboot to nix-build 2022-03-22 18:11:04 +01:00
a43c8e99b6 nixos-module/container/{dhcp-server,netboot}: prepare rpi4 netboot 2022-03-13 22:43:43 +01:00
bdca123b99 vpn-gw: init 2022-03-01 22:51:31 +01:00
674cd3bfa2 pkgs/ap: add ${hostName} to exceptions 2022-02-10 18:52:43 +01:00
4c8de9acd4 ap59: deploy to switch-b2 2022-02-05 00:33:09 +01:00
833803a255 pkgs/dns-slaves: fix allow-query address match list 2022-01-25 01:24:03 +01:00
b393efecf7 lib/dns: exclude ipv6 ctx yggdrasil 2022-01-25 01:07:17 +01:00
7acff4cf8e pkgs/vlan-report: add 2022-01-24 21:04:11 +01:00
7b80560aed pkgs/switches/*: don't configure null vlans 2022-01-19 17:18:46 +01:00
b75633566d yggdrasil: remove pantoto peering
Peer instead from the pantoto side.
2022-01-18 23:35:48 +01:00
b7ebd3ccdf pkgs/ap: fix uciDeleteAll param to reset wifi-ifaces 2022-01-18 22:19:49 +01:00
6a8feb82db pkgs/ap_install_collectd.sh: fix shabang 2022-01-18 21:22:27 +01:00
e6651c440d pkgs/ap: don't install wifi-on-link.sh on ap58 2022-01-18 21:21:45 +01:00
01933d17ca pkgs/switches/shared: fix for nullable vlan 2022-01-18 21:11:00 +01:00
77c0477bd0 vxlan over wireless: fix 2022-01-18 21:06:02 +01:00
2789589c25 vxlan over wireless: get to work 2022-01-18 03:50:43 +01:00
1327680612 vxlan over wireless: first try 2022-01-18 01:05:16 +01:00
4bb8fe46e2 yggdrasil: change listening port to 1337
1/tcp didn't work :(
2022-01-14 20:37:42 +01:00
b50a051904 yggdrasil: don't listen on ipv4 and fail 2022-01-14 19:30:29 +01:00
64ee9d06bb yggdrasil: listen, add port forwarding on upstream4+upstream1 2022-01-14 19:23:03 +01:00
4bf0e2bf33 yggdrasil: reconfigure peers 2022-01-14 00:54:33 +01:00
6cc02abdb8 yggdrasil: properly add a static key 2022-01-13 23:40:43 +01:00
792426f22c nixos-module/container/yggdrasil: enable NAT66 2022-01-13 20:34:01 +01:00
0e3921d126 Yggdrasil: enable IPv6 forwarding 2022-01-13 20:24:38 +01:00
d8bd90e049 yggdrasil: prepare container deployment 2022-01-13 20:17:50 +01:00
29c74782c7 Add yggdrasil container 2022-01-13 19:49:33 +01:00
806820950f nixos-module/container/bird: fix direct interfaces 2022-01-11 23:57:35 +01:00
343fe8c429 nixos-module/defaults: remove journalbeat
the service caused excessive disk write traffic, and the target greylog
server is overloaded anyway.
2022-01-11 22:16:53 +01:00
e1bceca9ab nix/nixos-module/container/wireguard: rename file from anon.nix 2022-01-11 20:02:25 +01:00
53cd892531 nixos-module/container/bird: advertise upstream local subnet into ospf 2022-01-11 20:00:07 +01:00
3c44eeaab1 lib/config/options: move host wireguard setting to interface entries 2022-01-11 19:58:50 +01:00
c58ee2dc9f pkgs/network-cypher-graphs: fix import-network-graphs 2022-01-10 01:51:22 +01:00
287dc1be75 pkgs/network-cypher-graphs: let import-network-graphs produce just a script 2022-01-09 02:59:15 +01:00
1f2cbd03b8 adding cypher graph generation utitlies 2021-12-28 18:43:42 +01:00
a474577abd Revert "nix/nixos-module/defaults: use non-nft iptables-legacy for migration"
This reverts commit 48b050b283.
2021-12-11 00:51:05 +01:00
48b050b283 nix/nixos-module/defaults: use non-nft iptables-legacy for migration 2021-12-10 22:56:43 +01:00
7ac993f61e nixos-module/server/lxc-containers: fix scope 2021-11-20 22:10:35 +01:00
9900b9af5e pkgs/network-graphs: remove debug output 2021-11-20 00:44:21 +01:00
8d671d8dee nixos-module/server/lxc-containers: resolve lxc interface name issue by ensuring the type key comes first
it took very long to find this
2021-11-20 00:43:32 +01:00
eb6e47e505 nixos-module/server/network: enable STP and decrease forward_delay for bridges 2021-11-18 22:54:33 +01:00
14ddaeba45 nixos-module/network: configure addresses for all net interfaces 2021-11-18 21:36:57 +01:00
f3e8c5398d pkgs: add all-rootfs 2021-11-18 20:41:06 +01:00
abb226bc5a server1, server2: allow building with zfs support 2021-11-18 20:39:52 +01:00
19674ea461 nixos-module/container/bird: revert to somewhat larger ospf intervals 2021-11-18 17:10:36 +01:00
f7dabd8e2d nixos-module/server/lxc-container: split container build and activation phases 2021-11-18 16:58:32 +01:00
3902efd3f3 nix/pkgs/subnetplan: use colspan 2021-11-18 04:17:10 +01:00
f98412346e nix/pkgs/subnetplan: cap max_prefix at 64 2021-11-18 00:06:44 +01:00
557f63b7c1 nix/pkgs/subnetplan: init 2021-11-17 23:57:16 +01:00
15f7687d92 nixos-module/container/bird: drastically reduce ospf intervals 2021-11-15 23:23:38 +01:00
ab199ec19e nix/pkgs: fix switch-to-production 2021-11-15 21:56:16 +01:00
2808bebffc lib/config/options: add duplicate vlan check 2021-11-15 21:30:38 +01:00
21fe4f2503 lib/config/options: add duplicate address checks and fix them 2021-11-14 01:41:19 +01:00
624f2e38f6 nixos-module/container/upstream/pppoe: fix user option 2021-11-13 03:23:45 +01:00
bcf60d2a5b config: remove automatic config subnet4Len, subnet4Net 2021-11-13 02:53:54 +01:00
32c0def45b config: nixify everything 2021-11-13 01:23:23 +01:00
6446c6b8a3 pkgs/ap: update ap_install_collectd.sh hint 2021-11-12 18:11:28 +01:00
ba94f712c1 pkgs/ap: fix wifi-iface 2021-11-11 17:49:29 +01:00
Daniel Poelzleithner
7f800810ad fix missing string conversation 2021-11-10 22:58:17 +01:00
Daniel Poelzleithner
cbf226f3a5 add mon alias entries to ceph cluster 2021-11-10 22:54:03 +01:00
f41c7d37e2 lib/config: move _ceph-mon._tcp srv record from server7 to server5 2021-11-10 20:55:39 +01:00
245cbcfc10 nix/config: add cluster _ceph-mon._tcp SRV records 2021-11-10 20:13:05 +01:00
01f37cec9f lib/dns: add extraRecords 2021-11-10 20:12:45 +01:00
f14c6ff200 pkgs/ap: catch failing service stop 2021-11-10 16:38:49 +01:00
d9443fc374 pkgs/ap: uci delete silently and don't abort 2021-11-09 21:16:53 +01:00
311df51820 pkgs/ap: don't use uci batch
was hiding which command produced an error
2021-11-09 21:10:56 +01:00
b8b4995433 pkgs/ap: delete unused networks 2021-11-09 21:07:37 +01:00
25217f0b82 pkgs/ap: move uciDeleteAll outside uci batch 2021-11-09 20:31:46 +01:00
bade3d54c6 pkgs/device-templates: rename device-scripts to .sh for nix run .#... 2021-11-09 16:47:48 +01:00
733f04258d pkgs/network-graphs: add up* to physical-graph 2021-11-07 03:21:39 +01:00
f0c5f1d398 lib/config/legacy: reflect the actual topology 2021-11-07 02:55:44 +01:00
71675556f2 lib/config: implement assertions and warnings 2021-11-07 02:43:56 +01:00
4080368927 pkgs/switches: sort output stably 2021-11-07 02:22:24 +01:00
8fc0567204 pkgs/switches: fixes 2021-11-07 02:21:48 +01:00
5c074bb051 pkgs/ap: fix multiple issues 2021-11-07 00:23:21 +01:00
db4d075af2 pkgs/network-graphs: don't use callPackage as it breaks the flake 2021-11-07 00:05:55 +01:00
40e8b351d5 pkgs/ap.nix: migrate template to nix 2021-11-06 22:57:12 +01:00
f156ab6f05 pkgs/network-graphs: init 2021-11-06 19:48:46 +01:00
ecf1b3afca pkgs/switches/linksys-srw2048: enable jumbo-frame
Attention: @poelzi
2021-11-06 03:38:57 +01:00