jackos1998
14d9bba4eb
nixos/home: Serve DNS on VRRP VIP and fix ipsec WAN ordering
...
Clients were handed both routers' real addresses as resolvers, so a downed
router meant per-query resolver timeouts. Serve pdns-recursor on the VRRP
VIPs (with non-local bind so the backup can pre-bind them) and advertise the
VIP via kea and radvd, so DNS follows the master. untrusted advertises
Cloudflare over v6 to match its v4 config.
ipsec started before the WAN's public IP was up: stream's wan carries a
static modem address that satisfies wait-online before the DHCP lease, so
libreswan loaded its mesh conns (left=<public IP>) unoriented and never
initiated. Gate stream's wan-online.target on the DHCP default route
instead, and mkForce ipsec onto wan-online.target only (dropping the
strongswan/libreswan multi-user.target pull-in) so the gate actually holds
on both boxes.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-19 22:38:02 +01:00
jackos1998
e63cee7b09
nixos/home: Migrate river WAN to PPPoE over Digiweb
...
river's WAN moves to a PPPoE session (Digiweb, over VLAN 10 with baby-jumbo
1508 MTU) driven by pppd, with its ip-up/ip-down hooks toggling a new
wan-online.target. stream keeps its DHCP WAN, so the existing 50-wan /
50-wan-ifb networkd config moves out of routing-common into stream, and the
shared consumers (ipsec, ipv6-clear-default-route) now attach to
wan-online.target instead of depending on systemd-networkd-wait-online@wan
directly.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-19 22:37:05 +01:00
jackos1998
f1dc04ec4b
Update inputs
CI / Check, build and cache nixfiles (push) Failing after 6m18s
2026-01-20 15:13:27 +00:00
jackos1998
8fa4a7ee60
"Release" 25.09 Giving
CI / Check, build and cache nixfiles (push) Failing after 31m46s
2025-09-06 17:14:09 +01:00
jackos1998
5783d3a51e
Update nixpkgs-stable to 24.11
2024-11-30 17:45:59 +00:00
jackos1998
6c98ef8944
Revert "nixos/home/routing-common: Move Tailscale to home routers"
...
CI / Check, build and cache Nix flake (push) Failing after 1h15m14s
This reverts commit 7c05b6158f
2024-11-26 00:04:43 +00:00
jackos1998
df7e5953eb
Update nixpkgs-unstable (and other inputs)
CI / Check, build and cache Nix flake (push) Has been cancelled
2024-11-25 23:10:24 +00:00
jackos1998
f577e7d58a
nixos/routing-common: Increase bandwidth for CAKE
CI / Check, build and cache Nix flake (push) Successful in 28m44s
2024-10-31 22:27:55 +00:00
jackos1998
7c05b6158f
nixos/home/routing-common: Move Tailscale to home routers
CI / Check, build and cache Nix flake (push) Successful in 18m12s
2024-07-22 16:22:08 +01:00
jackos1998
f9870abc9e
Working "shill From Home" full network boot
2024-06-29 23:12:21 +01:00
jackos1998
84ca556c47
nixos: Initial netbooting installer
CI / Check, build and cache Nix flake (push) Successful in 34m36s
Installer / Build installer (push) Successful in 4m34s
2024-06-24 00:42:26 +01:00
jackos1998
b8ee21b6e8
nixos/home/routing-common: More Disney+ IPv6 workarounds
2024-06-05 20:21:48 +01:00
jackos1998
40c491aa14
nixos/home/routing-common: Add MSS clamping to work around PMTUD
CI / Check, build and cache Nix flake (push) Failing after 1h4m53s
2024-03-21 20:42:06 +00:00
jackos1998
1a8740fb9c
nixos/home/routing-common: Increase RTT for CAKE
2024-03-21 20:41:28 +00:00
jackos1998
f540edb361
nixos/routing-common: Clear IPv6 local default route
CI / Check, build and cache Nix flake (push) Successful in 25m16s
2024-03-13 21:52:09 +00:00
jackos1998
bba87ef73b
nixos/home/routing-common: Add trusted AS211024 to input chain
CI / Check, build and cache Nix flake (push) Successful in 20m12s
2023-12-23 12:33:10 +00:00
jackos1998
e760569b3e
Don't blindly trust as211024
CI / Check, build and cache Nix flake (push) Successful in 20m22s
2023-12-20 23:06:27 +00:00
jackos1998
d44fdcfe6a
nixos/home/routing-common: Restrict SSH access
2023-12-20 20:41:19 +00:00
jackos1998
68bf705e85
Intra-AS211024 routing
CI / Check, build and cache Nix flake (push) Successful in 19m5s
2023-12-20 01:30:27 +00:00
jackos1998
318972a086
nixos/home/routing-common: Split DHCP pools
2023-12-17 13:39:55 +00:00
jackos1998
490413c24b
nixos/routing-common: Working DHCP
CI / Check, build and cache Nix flake (push) Successful in 18m48s
2023-12-16 18:50:51 +00:00
jackos1998
70f49c8438
nixos/home/routing-common: Working IPv6 router
2023-12-16 15:59:33 +00:00
jackos1998
8b0db3ac7f
nixos/home/routing-common: Add route to other router's public IPv4
2023-12-16 13:00:10 +00:00
jackos1998
93892224b7
nixos/home/routing-common: Allow VRRP traffic
CI / Check, build and cache Nix flake (push) Successful in 17m34s
2023-12-11 02:31:26 +00:00
jackos1998
5e5f70501c
nixos/river: Initial NVMe-oF booting river :)
CI / Check, build and cache Nix flake (push) Successful in 17m32s
2023-12-11 01:55:02 +00:00
jackos1998
c4e6896a0c
nixos: Add initial palace
CI / Check, build and cache Nix flake (push) Successful in 16m35s
2023-12-03 22:58:28 +00:00
jackos1998
0cc35547f2
nixos: Working l2mesh with IPsec
CI / Check, build and cache Nix flake (push) Successful in 17m15s
2023-11-26 01:29:44 +00:00
jackos1998
7404779c6d
nixos/home/routing-common: Add initial VRRP
2023-11-25 17:18:34 +00:00
jackos1998
63f36fabbb
nixos/home/routing-common: Set up CAKE qdisc for wan
CI / Check, build and cache Nix flake (push) Successful in 17m0s
2023-11-25 16:28:43 +00:00
jackos1998
c8b65092be
nixos/home/routing-common: Dynamically return WAN IP DNS
CI / Check, build and cache Nix flake (push) Successful in 17m8s
2023-11-25 15:07:58 +00:00
jackos1998
d347234e82
nixos/home/routing-common: Move mstpd config to separate file
CI / Check, build and cache Nix flake (push) Successful in 17m10s
2023-11-21 11:18:17 +00:00
jackos1998
0e115544e4
nixos/home/routing-common: Put lan-core on a 1500 byte MACVLAN
CI / Check, build and cache Nix flake (push) Successful in 17m13s
2023-11-21 09:54:09 +00:00
jackos1998
e6ad150865
nixos/home/routing: Initial working RSTP
CI / Check, build and cache Nix flake (push) Successful in 15m33s
2023-11-20 01:51:46 +00:00
jackos1998
655a44a28b
nixos/stream: Initial working config
CI / Check, build and cache Nix flake (push) Successful in 15m5s
2023-11-19 22:05:24 +00:00
jackos1998
7330b8f832
nixos/home/routing-common: Add starting DNS server
CI / Check, build and cache Nix flake (push) Successful in 14m21s
2023-11-19 14:32:23 +00:00
jackos1998
23db7e6c66
Initial oxbow setup
CI / Check, build and cache Nix flake (push) Successful in 14m56s
2023-11-19 00:27:29 +00:00
jackos1998