jackos1998
d51f2d62b6
Add a top-level README mapping the boxes and a full docs/ tree: topic pages (architecture, networking, deployment), per-site box pages for colony and home with containers nested under their hosts, remote and mobile boxes, the installer, and the home switch fabric reference (folded in from home-switches.md, with AGENTS.md and code comments retargeted to its new home). Box pages carry marked assignment tables that CI regenerates from nixos.allAssignments. AGENTS.md points at the new docs and keeps its terse agent version of the mechanics, referring to the topic pages for depth.
1.7 KiB
1.7 KiB
britnet
A small VPS in Birmingham (bhx1) acting as a second Tailscale/WireGuard egress point — a
narrower gateway role than britway (no control plane, no BGP).
- Source:
nixos/boxes/britnet.nix - Host: VPS (Birmingham,
bhx1; provider uplink assignmentallhost)
Role
- Tailscale exit node — logs into the headscale on
britway(--login-server=https://hs.nul.ie) with--advertise-exit-node. - WireGuard hub —
wg0listens on UDP 51820 on thevpnnetwork (10.200.0.0/24/fdfb:5ebf:6e84::/64), with a single peer at10.200.0.10/fdfb:5ebf:6e84::10. - NAT gateway — traffic arriving on
tailscale0/wg0is forwarded outveth0and SNATed to theallhostv4/v6 addresses.
Network assignments
| Name | Assignment | IPv4 | IPv6 | Domain | Notes |
|---|---|---|---|---|---|
| britnet | allhost | 77.74.199.67/24 gw 77.74.199.1 |
2a12:ab46:5344:99::a/64 gw 2a12:ab46:5344::1 |
bhx1.int.nul.ie | |
| britnet | vpn | 10.200.0.1/24 |
fdfb:5ebf:6e84::1/64 |
— |
Networking
- The provider interface is renamed to
veth0by MAC. The v6 default gateway (2a12:ab46:5344::1) sits off-subnet, so a link-scope route is added to reach it. wg0is a networkd WireGuard netdev keyed frombritnet/wg.key; RA is disabled on it.- Upstream DNS is hardcoded to Cloudflare (
1.1.1.1/1.0.0.1). iperf3runs with an open port for bandwidth testing.
Notable config files
nixos/boxes/britnet.nix— the whole box (single file).