5 Commits

Include renames

Author	SHA1	Message	Date
jackos1998andClaude Opus 4.8	26e6870337	lib/home: Centralise advertised search domains ... radvd's DNSSL and kea's domain-search hardcoded the same list of search domains in two places. Hoist it to lib.my.c.home.searchDomains so there is a single source of truth (and so other consumers, such as statically-configured boxes, can reuse it). No change to what is advertised. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-08-02 22:04:34 +01:00
jackos1998andClaude Opus 4.8	14d9bba4eb	nixos/home: Serve DNS on VRRP VIP and fix ipsec WAN ordering ... Clients were handed both routers' real addresses as resolvers, so a downed router meant per-query resolver timeouts. Serve pdns-recursor on the VRRP VIPs (with non-local bind so the backup can pre-bind them) and advertise the VIP via kea and radvd, so DNS follows the master. untrusted advertises Cloudflare over v6 to match its v4 config. ipsec started before the WAN's public IP was up: stream's wan carries a static modem address that satisfies wait-online before the DHCP lease, so libreswan loaded its mesh conns (left=<public IP>) unoriented and never initiated. Gate stream's wan-online.target on the DHCP default route instead, and mkForce ipsec onto wan-online.target only (dropping the strongswan/libreswan multi-user.target pull-in) so the gate actually holds on both boxes. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-19 22:38:02 +01:00
jackos1998	f58b71e8d3	nixos/britway: Use internal addresses for DNS	2023-12-23 00:49:02 +00:00
jackos1998	9fa8299b71	nixos/home/routing-common: Add missing radvd search domain	2023-12-16 19:33:53 +00:00
jackos1998	70f49c8438	nixos/home/routing-common: Working IPv6 router	2023-12-16 15:59:33 +00:00