jackos1998
0bd08c4a91
nixos/home: Recurse over IPv4 only on the home routers
...
CI / Check, build and cache nixfiles (push) Successful in 46m1s
The routers' IPv6 default route runs over the as211024 mesh as a
proto-static route that blackholes rather than withdrawing when the mesh
flaps (e.g. during ipsec churn on a deploy). With "::" in the recursor's
outgoing.source_address, pdns-recursor kept selecting IPv6 to reach
authoritative servers, stalled on timeouts, and took recursion down with
it whenever the mesh bounced. Drop "::" so upstream recursion goes out
the WAN over IPv4 and stays up; AAAA records are still served fine.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-20 19:56:43 +01:00
jackos1998
14d9bba4eb
nixos/home: Serve DNS on VRRP VIP and fix ipsec WAN ordering
...
Clients were handed both routers' real addresses as resolvers, so a downed
router meant per-query resolver timeouts. Serve pdns-recursor on the VRRP
VIPs (with non-local bind so the backup can pre-bind them) and advertise the
VIP via kea and radvd, so DNS follows the master. untrusted advertises
Cloudflare over v6 to match its v4 config.
ipsec started before the WAN's public IP was up: stream's wan carries a
static modem address that satisfies wait-online before the DHCP lease, so
libreswan loaded its mesh conns (left=<public IP>) unoriented and never
initiated. Gate stream's wan-online.target on the DHCP default route
instead, and mkForce ipsec onto wan-online.target only (dropping the
strongswan/libreswan multi-user.target pull-in) so the gate actually holds
on both boxes.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-19 22:38:02 +01:00
jackos1998
e63cee7b09
nixos/home: Migrate river WAN to PPPoE over Digiweb
...
river's WAN moves to a PPPoE session (Digiweb, over VLAN 10 with baby-jumbo
1508 MTU) driven by pppd, with its ip-up/ip-down hooks toggling a new
wan-online.target. stream keeps its DHCP WAN, so the existing 50-wan /
50-wan-ifb networkd config moves out of routing-common into stream, and the
shared consumers (ipsec, ipv6-clear-default-route) now attach to
wan-online.target instead of depending on systemd-networkd-wait-online@wan
directly.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-07-19 22:37:05 +01:00
jackos1998
aab4a193ae
nixos/home: Add brian
CI / Check, build and cache nixfiles (push) Failing after 3h2m50s
2026-07-15 02:22:15 +01:00
jackos1998
805590a705
nixos/routing-common: Fix mstpd missing bridge-stp script
CI / Check, build and cache nixfiles (push) Successful in 46m37s
2026-07-12 18:40:38 +01:00
jackos1998
f8dbd99a7b
nixos/routing-common: Add missing ttl param to DDNS update
2026-07-12 17:15:57 +01:00
jackos1998
93529c578b
"Release" 26.06 Irritating
CI / Check, build and cache nixfiles (push) Successful in 2h20m51s
2026-06-13 16:00:18 +01:00
jackos1998
2bf18319c9
nixos/routing-common: Fix keepalived link-local addresses
CI / Check, build and cache nixfiles (push) Successful in 1h17m1s
2026-03-16 15:12:46 +00:00
jackos1998
a394b9124a
nixos/routing-common: Fix Cloudflare
2026-03-16 13:37:16 +00:00
jackos1998
4ec59a64ce
nixos/home/routing-common: Add DHCP pool for untrusted LAN
2026-03-03 20:15:45 +00:00
jackos1998
f1dc04ec4b
Update inputs
CI / Check, build and cache nixfiles (push) Failing after 6m18s
2026-01-20 15:13:27 +00:00
jackos1998
f0740741a4
nixos/home/routing-common: Fix mstpd shellcheck
CI / Check, build and cache nixfiles (push) Successful in 2h44m21s
2025-09-06 21:40:05 +01:00
jackos1998
8fa4a7ee60
"Release" 25.09 Giving
CI / Check, build and cache nixfiles (push) Failing after 31m46s
2025-09-06 17:14:09 +01:00
jackos1998
c8bd63ec3e
nixos: Add nixlight static IP and WLED hass integration
CI / Check, build and cache nixfiles (push) Failing after 29m45s
2025-05-26 23:25:05 +01:00
jackos1998
05074a1fd9
nixos/home/hass: Basic Reolink camera setup
CI / Check, build and cache nixfiles (push) Has been cancelled
2025-03-15 01:07:12 +00:00
jackos1998
69060dfbff
nixos/home/routing-common: Add static lease for hass-panel
2025-03-14 22:53:36 +00:00
jackos1998
f02f538ab2
nixos/home/routing-common: Add media DHCP reservations
2025-03-10 22:33:48 +00:00
jackos1998
2a8ced0fec
nixos/home/routing-common: Add DNS blocklist
CI / Check, build and cache nixfiles (push) Successful in 1h6m52s
2025-03-10 10:46:21 +00:00
jackos1998
8f4b61fc2b
Update inputs
2025-03-09 20:00:35 +00:00
jackos1998
5783d3a51e
Update nixpkgs-stable to 24.11
2024-11-30 17:45:59 +00:00
jackos1998
6c98ef8944
Revert "nixos/home/routing-common: Move Tailscale to home routers"
...
CI / Check, build and cache Nix flake (push) Failing after 1h15m14s
This reverts commit 7c05b6158f
2024-11-26 00:04:43 +00:00
jackos1998
df7e5953eb
Update nixpkgs-unstable (and other inputs)
CI / Check, build and cache Nix flake (push) Has been cancelled
2024-11-25 23:10:24 +00:00
jackos1998
f577e7d58a
nixos/routing-common: Increase bandwidth for CAKE
CI / Check, build and cache Nix flake (push) Successful in 28m44s
2024-10-31 22:27:55 +00:00
jackos1998
64c3fe682c
nixos/home/routing-common: Only run Tailscale on active router
CI / Check, build and cache Nix flake (push) Successful in 26m33s
2024-07-31 10:20:19 +01:00
jackos1998
7c05b6158f
nixos/home/routing-common: Move Tailscale to home routers
CI / Check, build and cache Nix flake (push) Successful in 18m12s
2024-07-22 16:22:08 +01:00
jackos1998
d5bb2f6787
nixos/routing-common: Start / stop radvd only for IPv6
CI / Check, build and cache Nix flake (push) Successful in 16m56s
2024-07-11 00:16:33 +01:00
jackos1998
4e947d4b1e
nixos/unifi: Set up UniFi controller
CI / Check, build and cache Nix flake (push) Failing after 40m53s
2024-06-30 12:21:21 +01:00
jackos1998
91489551b9
nixos: Working castle NVMe-oF root
2024-06-30 03:59:46 +01:00
jackos1998
f9870abc9e
Working "shill From Home" full network boot
2024-06-29 23:12:21 +01:00
jackos1998
84ca556c47
nixos: Initial netbooting installer
CI / Check, build and cache Nix flake (push) Successful in 34m36s
Installer / Build installer (push) Successful in 4m34s
2024-06-24 00:42:26 +01:00
jackos1998
b8ee21b6e8
nixos/home/routing-common: More Disney+ IPv6 workarounds
2024-06-05 20:21:48 +01:00
jackos1998
a5e51ddd6b
nixos/home: Filter out Disney+ IPv6 DNS queries
CI / Check, build and cache Nix flake (push) Successful in 36m4s
2024-05-16 21:05:48 +01:00
jackos1998
57ec2bfc1b
nixos/home/routing-common: Make keepalived ping more resilient
CI / Check, build and cache Nix flake (push) Successful in 33m37s
2024-04-05 15:22:10 +01:00
jackos1998
fdc65c544e
nixos/home/routing-common: Add ping test to keepalived
CI / Check, build and cache Nix flake (push) Successful in 35m51s
2024-03-24 13:32:03 +00:00
jackos1998
40c491aa14
nixos/home/routing-common: Add MSS clamping to work around PMTUD
CI / Check, build and cache Nix flake (push) Failing after 1h4m53s
2024-03-21 20:42:06 +00:00
jackos1998
1a8740fb9c
nixos/home/routing-common: Increase RTT for CAKE
2024-03-21 20:41:28 +00:00
jackos1998
f857e751b5
nixos/home/routing-common: Restart kea on failure
2024-03-21 20:40:38 +00:00
jackos1998
f540edb361
nixos/routing-common: Clear IPv6 local default route
CI / Check, build and cache Nix flake (push) Successful in 25m16s
2024-03-13 21:52:09 +00:00
jackos1998
5ec77dfde6
nixos/routing-common: Add DNS for Shytzel and wave
CI / Check, build and cache Nix flake (push) Successful in 25m32s
2024-03-13 21:00:20 +00:00
jackos1998
e24ac05bb2
nixos/home/routing-common: Add vibe DNS
CI / Check, build and cache Nix flake (push) Successful in 23m7s
2024-01-03 03:10:44 +00:00
jackos1998
bba87ef73b
nixos/home/routing-common: Add trusted AS211024 to input chain
CI / Check, build and cache Nix flake (push) Successful in 20m12s
2023-12-23 12:33:10 +00:00
jackos1998
4e3ff0a466
nixos/home/routing-common: Add dynamic DNS update script
CI / Check, build and cache Nix flake (push) Successful in 20m48s
2023-12-23 01:22:41 +00:00
jackos1998
f58b71e8d3
nixos/britway: Use internal addresses for DNS
2023-12-23 00:49:02 +00:00
jackos1998
e760569b3e
Don't blindly trust as211024
CI / Check, build and cache Nix flake (push) Successful in 20m22s
2023-12-20 23:06:27 +00:00
jackos1998
d44fdcfe6a
nixos/home/routing-common: Restrict SSH access
2023-12-20 20:41:19 +00:00
jackos1998
68bf705e85
Intra-AS211024 routing
CI / Check, build and cache Nix flake (push) Successful in 19m5s
2023-12-20 01:30:27 +00:00
jackos1998
f321a039f3
nixos/home/routing-common: Send MTU DHCP option
CI / Check, build and cache Nix flake (push) Has been cancelled
Installer / Build installer (push) Successful in 4m36s
2023-12-17 15:19:14 +00:00
jackos1998
318972a086
nixos/home/routing-common: Split DHCP pools
2023-12-17 13:39:55 +00:00
jackos1998
9fa8299b71
nixos/home/routing-common: Add missing radvd search domain
CI / Check, build and cache Nix flake (push) Successful in 17m45s
2023-12-16 19:33:53 +00:00
jackos1998
490413c24b
nixos/routing-common: Working DHCP
CI / Check, build and cache Nix flake (push) Successful in 18m48s
2023-12-16 18:50:51 +00:00
jackos1998