97 lines
2.8 KiB
Nix
97 lines
2.8 KiB
Nix
{ config, pkgs, lib, self, ... }:
|
|
|
|
let
|
|
mainServer = "server1";
|
|
pillar = self.lib.saltPillarFor "*";
|
|
|
|
renameAttr = from: to: attrset:
|
|
builtins.foldl' (result: name:
|
|
if name == from
|
|
then result // { "${to}" = attrset.${name}; }
|
|
else result // { "${name}" = attrset.${name}; }
|
|
) {} (builtins.attrNames attrset);
|
|
|
|
# HACK: `type = "phys"` works but once an LXC container is stopped
|
|
# the VLAN interface is not moved back.
|
|
forceVeth = interface: interface // {
|
|
type = "veth";
|
|
};
|
|
in
|
|
{
|
|
options.salt-pillar = lib.mkOption {};
|
|
config.salt-pillar = pillar;
|
|
|
|
config.site.net = lib.mkMerge ([
|
|
(builtins.mapAttrs (_: vlan: { vlan = vlan; }) pillar.vlans)
|
|
(builtins.mapAttrs (_: subnet4: { inherit subnet4; }) pillar.subnets-inet)
|
|
(builtins.mapAttrs (_: hosts4: { inherit hosts4; }) pillar.hosts-inet)
|
|
{ core.ospf.secret = pillar.ospf.secret; }
|
|
] ++ (
|
|
map (ctx:
|
|
builtins.mapAttrs (_: subnet: { subnets6.${ctx} = subnet; }) pillar.subnets-inet6.${ctx}
|
|
) (builtins.attrNames pillar.subnets-inet6)
|
|
) ++ (
|
|
map (ctx:
|
|
builtins.mapAttrs (_: subnet: { hosts6.${ctx} = subnet; }) pillar.hosts-inet6.${ctx}
|
|
) (builtins.attrNames pillar.hosts-inet6)
|
|
));
|
|
|
|
config.site.hosts = lib.mkMerge (
|
|
[
|
|
{
|
|
"${mainServer}".role = "server";
|
|
}
|
|
|
|
(builtins.mapAttrs (_: switch: {
|
|
inherit (switch) model location password;
|
|
role = "switch";
|
|
}) pillar.switches)
|
|
|
|
(builtins.mapAttrs (_: ap: {
|
|
inherit (ap) model location password;
|
|
role = "ap";
|
|
}) pillar.cpe)
|
|
|
|
(builtins.mapAttrs (name: container: {
|
|
role = "container";
|
|
location = mainServer;
|
|
interfaces =
|
|
builtins.mapAttrs (_: interface:
|
|
renameAttr "gw" "gw4"
|
|
(forceVeth interface)
|
|
) container.interfaces;
|
|
ospf =
|
|
let
|
|
hostPillar = self.lib.saltPillarFor name;
|
|
ospfConf = hostPillar.ospf;
|
|
in lib.optionalAttrs (hostPillar ? ospf && ospfConf ? stubnets-inet) {
|
|
stubNets4 = ospfConf.stubnets-inet;
|
|
} // lib.optionalAttrs (hostPillar ? ospf && ospfConf ? stubnets-inet6) {
|
|
stubNets6 = ospfConf.stubnets-inet6;
|
|
};
|
|
}) pillar.containers)
|
|
] ++
|
|
|
|
(map (net:
|
|
builtins.mapAttrs (_: addr4: {
|
|
}) pillar.hosts-inet.${net}
|
|
) (builtins.attrNames pillar.hosts-inet)) ++
|
|
|
|
(builtins.concatMap (ctx:
|
|
map (net:
|
|
builtins.mapAttrs (_: addr6: {
|
|
}) pillar.hosts-inet6.${ctx}.${net}
|
|
) (builtins.attrNames pillar.hosts-inet6.${ctx})
|
|
) (builtins.attrNames pillar.hosts-inet6))
|
|
);
|
|
|
|
config.site.ospf = {
|
|
networks4 = [ "172.20.72.0/21" ];
|
|
networks6 = [
|
|
"fd23:42:c3d2:500::/56"
|
|
"2a02:8106:208:5200::/56"
|
|
"2a02:8106:211:e900::/56"
|
|
];
|
|
};
|
|
}
|