Commit Graph

25 Commits

Author SHA1 Message Date
jackos1998 14d9bba4eb nixos/home: Serve DNS on VRRP VIP and fix ipsec WAN ordering
Clients were handed both routers' real addresses as resolvers, so a downed
router meant per-query resolver timeouts. Serve pdns-recursor on the VRRP
VIPs (with non-local bind so the backup can pre-bind them) and advertise the
VIP via kea and radvd, so DNS follows the master. untrusted advertises
Cloudflare over v6 to match its v4 config.

ipsec started before the WAN's public IP was up: stream's wan carries a
static modem address that satisfies wait-online before the DHCP lease, so
libreswan loaded its mesh conns (left=<public IP>) unoriented and never
initiated. Gate stream's wan-online.target on the DHCP default route
instead, and mkForce ipsec onto wan-online.target only (dropping the
strongswan/libreswan multi-user.target pull-in) so the gate actually holds
on both boxes.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-19 22:38:02 +01:00
jackos1998 aab4a193ae nixos/home: Add brian
CI / Check, build and cache nixfiles (push) Failing after 3h2m50s
2026-07-15 02:22:15 +01:00
jackos1998 93529c578b "Release" 26.06 Irritating
CI / Check, build and cache nixfiles (push) Successful in 2h20m51s
2026-06-13 16:00:18 +01:00
jackos1998 8fa4a7ee60 "Release" 25.09 Giving
CI / Check, build and cache nixfiles (push) Failing after 31m46s
2025-09-06 17:14:09 +01:00
jackos1998 c8bd63ec3e nixos: Add nixlight static IP and WLED hass integration
CI / Check, build and cache nixfiles (push) Failing after 29m45s
2025-05-26 23:25:05 +01:00
jackos1998 05074a1fd9 nixos/home/hass: Basic Reolink camera setup
CI / Check, build and cache nixfiles (push) Has been cancelled
2025-03-15 01:07:12 +00:00
jackos1998 2a8ced0fec nixos/home/routing-common: Add DNS blocklist
CI / Check, build and cache nixfiles (push) Successful in 1h6m52s
2025-03-10 10:46:21 +00:00
jackos1998 64c3fe682c nixos/home/routing-common: Only run Tailscale on active router
CI / Check, build and cache Nix flake (push) Successful in 26m33s
2024-07-31 10:20:19 +01:00
jackos1998 4e947d4b1e nixos/unifi: Set up UniFi controller
CI / Check, build and cache Nix flake (push) Failing after 40m53s
2024-06-30 12:21:21 +01:00
jackos1998 f9870abc9e Working "shill From Home" full network boot 2024-06-29 23:12:21 +01:00
jackos1998 84ca556c47 nixos: Initial netbooting installer
CI / Check, build and cache Nix flake (push) Successful in 34m36s
Installer / Build installer (push) Successful in 4m34s
2024-06-24 00:42:26 +01:00
jackos1998 b8ee21b6e8 nixos/home/routing-common: More Disney+ IPv6 workarounds 2024-06-05 20:21:48 +01:00
jackos1998 a5e51ddd6b nixos/home: Filter out Disney+ IPv6 DNS queries
CI / Check, build and cache Nix flake (push) Successful in 36m4s
2024-05-16 21:05:48 +01:00
jackos1998 5ec77dfde6 nixos/routing-common: Add DNS for Shytzel and wave
CI / Check, build and cache Nix flake (push) Successful in 25m32s
2024-03-13 21:00:20 +00:00
jackos1998 e24ac05bb2 nixos/home/routing-common: Add vibe DNS
CI / Check, build and cache Nix flake (push) Successful in 23m7s
2024-01-03 03:10:44 +00:00
jackos1998 4e3ff0a466 nixos/home/routing-common: Add dynamic DNS update script
CI / Check, build and cache Nix flake (push) Successful in 20m48s
2023-12-23 01:22:41 +00:00
jackos1998 f58b71e8d3 nixos/britway: Use internal addresses for DNS 2023-12-23 00:49:02 +00:00
jackos1998 490413c24b nixos/routing-common: Working DHCP
CI / Check, build and cache Nix flake (push) Successful in 18m48s
2023-12-16 18:50:51 +00:00
jackos1998 70f49c8438 nixos/home/routing-common: Working IPv6 router 2023-12-16 15:59:33 +00:00
jackos1998 c4e6896a0c nixos: Add initial palace
CI / Check, build and cache Nix flake (push) Successful in 16m35s
2023-12-03 22:58:28 +00:00
jackos1998 0cc35547f2 nixos: Working l2mesh with IPsec
CI / Check, build and cache Nix flake (push) Successful in 17m15s
2023-11-26 01:29:44 +00:00
jackos1998 c8b65092be nixos/home/routing-common: Dynamically return WAN IP DNS
CI / Check, build and cache Nix flake (push) Successful in 17m8s
2023-11-25 15:07:58 +00:00
jackos1998 afe124a726 nixos/stream: Remove public IPv4
CI / Check, build and cache Nix flake (push) Successful in 15m21s
2023-11-19 23:50:24 +00:00
jackos1998 655a44a28b nixos/stream: Initial working config
CI / Check, build and cache Nix flake (push) Successful in 15m5s
2023-11-19 22:05:24 +00:00
jackos1998 7330b8f832 nixos/home/routing-common: Add starting DNS server
CI / Check, build and cache Nix flake (push) Successful in 14m21s
2023-11-19 14:32:23 +00:00