{ lib, ... }: { site.net.serv = { domainName = "serv.zentralwerk.org"; subnet4 = "172.20.73.0/25"; hosts4 = { serv-gw = "172.20.73.1"; dns = "172.20.73.2"; stats = "172.20.73.3"; tlms-elastic = "172.20.73.7"; # tlms dnscache = "172.20.73.8"; buzzrelay = "172.20.73.15"; matemat = "172.20.73.21"; spaceapi = "172.20.73.25"; mucbot = "172.20.73.27"; scrape = "172.20.73.32"; tram-borzoi = "172.20.73.38"; # tlms borken-data-hoarder = "172.20.73.39"; # tlms matrix = "172.20.73.40"; # "172.20.73.41" luulaatsch-asterisk = "172.20.73.42"; grafana = "172.20.73.43"; # "172.20.73.44" public-access-proxy = "172.20.73.45"; marenz = "172.20.73.46"; network-homepage = "172.20.73.47"; home-assistant = "172.20.73.48"; hydra = "172.20.73.49"; owncast = "172.20.73.50"; nfsroot = "172.20.73.51"; ticker = "172.20.73.52"; gitea = "172.20.73.53"; stream = "172.20.73.54"; jabber = "172.20.73.55"; mobilizon = "172.20.73.56"; radiobert = "172.20.73.57"; mail = "172.20.73.58"; # "172.20.73.59" sdrweb = "172.20.73.60"; bind = "172.20.73.61"; blogs = "172.20.73.62"; # "172.20.73.63" staging-data-hoarder = "172.20.73.64"; # tlms oparl = "172.20.73.65"; hedgedoc = "172.20.73.66"; mediawiki = "172.20.73.67"; gnunet = "172.20.73.68"; data-hoarder = "172.20.73.69"; # tlms broker = "172.20.73.70"; ftp = "172.20.73.71"; auth = "172.20.73.72"; # "172.20.73.73" # "172.20.73.74" prometheus = "172.20.73.75"; # "172.20.73.76" drone = "172.20.73.77"; }; ipv6Router = "serv-gw"; subnets6.dn42 = "fd23:42:c3d2:582::/64"; subnets6.up4 = "2a00:8180:2c00:282::/64"; hosts6.dn42 = { bind = "fd23:42:c3d2:582:cd7:56ff:fe69:6366"; blogs = "fd42:42:c3d2:582:b8a8:7dff:fee8:5ac2"; dns = "fd23:42:c3d2:582:2:0:0:2"; dnscache = "fd23:42:c3d2:582:f096:dbff:fee8:427d"; grafana = "fd23:42:c3d2:582:4042:fbff:fe4b:2de8"; hydra = "fd23:42:c3d2:582:e2cb:4eff:fe3b:f94b"; jabber = "fd23:42:c3d2:582:b869:ccff:fe46:902a"; keycloak = "fd23:42:c3d2:582:c48:bbff:fe87:721d"; logging = "fd23:42:c3d2:582:6811:edff:fe40:89c6"; mail = "fd23:42:c3d2:582:88c0:41ff:fe70:d6cd"; matemat = "fd23:42:c3d2:582:f82b:1bff:fedc:8572"; minetest = "fd23:42:c3d2:582:c3a:42ff:fe5d:b20c"; mobilizon = "fd23:42:c3d2:582:48d1:5cff:fea7:1676"; mongo = "fd23:42:c3d2:582:14ec:c8ff:fe0a:fc5c"; mucbot = "fd23:42:c3d2:582:28db:dff:fe6b:e89a"; radiobert = "fd23:42:c3d2:582:e65f:1ff:fe5d:1679"; radius = "fd23:42:c3d2:582:2:0:0:4"; sdrweb = "fd23:42:c3d2:582:3078:bbff:fe76:e9ef"; serv-gw = "fd23:42:c3d2:582::1"; spaceapi = "fd23:42:c3d2:582:1457:adff:fe93:62e9"; stats = "fd23:42:c3d2:582:2:0:0:3"; zeit = "fd23:42:c3d2:582:2:0:0:5"; direkthilfe = "fd23:42:c3d2:582:1cde:c5ff:fe47:8c2a"; nix-build = "fd23:42:c3d2:582:683d:a9ff:fe45:3d1f"; staging-data-hoarder = "fd23:42:c3d2:582:2de:5bff:fef9:e23d"; oparl = "fd23:42:c3d2:582:2de:9aff:fece:3879"; gnunet = "fd23:42:c3d2:582:44"; broker = "fd23:42:c3d2:582:46"; ftp = "fd23:42:c3d2:582:47"; zengel = "fd23:42:c3d2:582:4a"; network-homepage = "fd23:42:c3d2:582:2f"; owncast = "fd23:42:c3d2:582:32"; prometheus = "fd23:42:c3d2:582:4b"; buzzrelay = "fd23:42:c3d2:582:f"; oxigraph = "fd23:42:c3d2:582:4c"; tmppleroma = "fd23:42:c3d2:582:2c"; luulaatsch-asterisk = "fd23:42:c3d2:582:2a"; }; hosts6.up4 = { bind = "2a00:8180:2c00:282:cd7:56ff:fe69:6366"; blogs = "2a00:8180:2c00:282:b8a8:7dff:fee8:5ac2"; dns = "2a00:8180:2c00:282:2:0:0:2"; dnscache = "2a00:8180:2c00:282:f096:dbff:fee8:427d"; grafana = "2a00:8180:2c00:282:4042:fbff:fe4b:2de8"; hydra = "2a00:8180:2c00:282:e2cb:4eff:fe3b:f94b"; jabber = "2a00:8180:2c00:282:b869:ccff:fe46:902a"; keycloak = "2a00:8180:2c00:282:c48:bbff:fe87:721d"; logging = "2a00:8180:2c00:282:6811:edff:fe40:89c6"; mail = "2a00:8180:2c00:282:88c0:41ff:fe70:d6cd"; matemat = "2a00:8180:2c00:282:f82b:1bff:fedc:8572"; minetest = "2a00:8180:2c00:282:c3a:42ff:fe5d:b20c"; mobilizon = "2a00:8180:2c00:282:48d1:5cff:fea7:1676"; mongo = "2a00:8180:2c00:282:14ec:c8ff:fe0a:fc5c"; mucbot = "2a00:8180:2c00:282:28db:dff:fe6b:e89a"; public-access-proxy = "2a00:8180:2c00:282:1024:5fff:febd:9be7"; radiobert = "2a00:8180:2c00:282:e65f:1ff:fe5d:1679"; radius = "2a00:8180:2c00:282:2:0:0:4"; scrape = "2a00:8180:2c00:282:e073:50ff:fef5:eb6e"; sdrweb = "2a00:8180:2c00:282:3078:bbff:fe76:e9ef"; spaceapi = "2a00:8180:2c00:282:1457:adff:fe93:62e9"; stats = "2a00:8180:2c00:282:2:0:0:3"; stream = "fd23:42:c3d2:583:dc91:c7ff:fe51:d1c5"; ticker = "2a00:8180:2c00:282:b407:40ff:fec1:81f2"; zeit = "2a00:8180:2c00:282:2:0:0:5"; direkthilfe = "2a00:8180:2c00:282:1cde:c5ff:fe47:8c2a"; nix-build = "2a00:8180:2c00:282:683d:a9ff:fe45:3d1f"; staging-data-hoarder = "2a00:8180:2c00:282:2de:5bff:fef9:e23d"; oparl = "2a00:8180:2c00:282:2de:9aff:fece:3879"; serv-gw = "2a00:8180:2c00:282::1"; luulaatsch-asterisk = "2a00:8180:2c00:282::2a"; drone = "2a00:8180:2c00:282::2b"; tmppleroma = "2a00:8180:2c00:282::2c"; matrix = "2a00:8180:2c00:282::2d"; network-homepage = "2a00:8180:2c00:282::2f"; mediawiki = "2a00:8180:2c00:282::43"; owncast = "2a00:8180:2c00:282::32"; gnunet = "2a00:8180:2c00:282::44"; data-hoarder = "2a00:8180:2c00:282::45"; broker = "2a00:8180:2c00:282::46"; ftp = "2a00:8180:2c00:282::47"; auth = "2a00:8180:2c00:282::48"; zengel = "2a00:8180:2c00:282::4a"; prometheus = "2a00:8180:2c00:282::4b"; oxigraph = "2a00:8180:2c00:282::4c"; hedgedoc = "2a00:8180:2c00:282::6"; buzzrelay = "2a00:8180:2c00:282::f"; }; }; site.hosts = let makeContainer = lib.recursiveUpdate { role = "container"; interfaces = { serv = { gw4 = "serv-gw"; gw6 = "serv-gw"; type = "veth"; }; }; }; in { dns = makeContainer { interfaces.serv.hwaddr = "0A:14:48:01:23:00"; services.dns.enable = true; }; dnscache = makeContainer { services.dnscache.enable = true; }; serv-gw = makeContainer { interfaces = { core = { type = "veth"; hwaddr = "0A:14:48:01:06:01"; gw4 = null; gw6 = null; }; serv = { hwaddr = "0A:14:48:01:06:00"; gw4 = null; gw6 = null; }; }; ospf.allowedUpstreams = [ "upstream4" "upstream3" "anon1" "freifunk" ]; }; stats = makeContainer { interfaces.serv.hwaddr = "0A:14:48:01:15:00"; }; hydra = { role = "client"; model = "nixos"; interfaces.serv.type = "phys"; }; }; }