jackos1998
b9bcb1eaeb
Statically-addressed home servers on hi run no DHCP, so they learned a resolver only from the v6 RA RDNSS and lost DNS whenever v6 (and thus the RA) was absent. Factor the fix castle/palace applied inline into a shared lib.my.c.home.vlanDns helper that points resolved at the VLAN's VRRP VIPs (always-present static v4, plus v6 when up) and sets the advertised search domains, then apply it to every statically-addressed hi client: castle, palace, cellar, sfh and the sfh hass/unifi containers. Document it under the router client DNS section. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
103 lines
2.6 KiB
Nix
103 lines
2.6 KiB
Nix
{ lib, ... }:
|
|
let
|
|
inherit (lib.my) net;
|
|
inherit (lib.my.c) pubDomain;
|
|
inherit (lib.my.c.home) domain prefixes vips vlanDns hiMTU;
|
|
in
|
|
{
|
|
nixos.systems.cellar = {
|
|
system = "x86_64-linux";
|
|
nixpkgs = "mine";
|
|
|
|
assignments = {
|
|
hi = {
|
|
inherit domain;
|
|
mtu = hiMTU;
|
|
ipv4 = {
|
|
address = net.cidr.host 80 prefixes.hi.v4;
|
|
mask = 22;
|
|
gateway = vips.hi.v4;
|
|
};
|
|
ipv6 = {
|
|
iid = "::4:1";
|
|
address = net.cidr.host (65536*4+1) prefixes.hi.v6;
|
|
};
|
|
};
|
|
};
|
|
|
|
configuration = { lib, pkgs, modulesPath, config, assignments, allAssignments, ... }:
|
|
let
|
|
inherit (lib) mkMerge;
|
|
inherit (lib.my) networkdAssignment;
|
|
in
|
|
{
|
|
imports = [
|
|
"${modulesPath}/profiles/qemu-guest.nix"
|
|
./spdk.nix
|
|
];
|
|
|
|
config = mkMerge [
|
|
{
|
|
boot = {
|
|
kernelParams = [ "console=ttyS0,115200n8" "intel_iommu=on" ];
|
|
};
|
|
|
|
fileSystems = {
|
|
"/boot" = {
|
|
device = "/dev/disk/by-partuuid/f7562ee6-34c1-4e94-8ae7-c6e71794d563";
|
|
fsType = "vfat";
|
|
};
|
|
"/nix" = {
|
|
device = "/dev/disk/by-uuid/f31f6abd-0832-4014-a761-f3c3126d5739";
|
|
fsType = "ext4";
|
|
};
|
|
"/persist" = {
|
|
device = "/dev/disk/by-uuid/620364e3-3a30-4704-be80-8593516e7482";
|
|
fsType = "ext4";
|
|
neededForBoot = true;
|
|
};
|
|
};
|
|
|
|
networking = { inherit domain; };
|
|
|
|
environment.systemPackages = with pkgs; [
|
|
pciutils
|
|
partclone
|
|
];
|
|
|
|
services = {
|
|
fstrim.enable = true;
|
|
netdata.enable = true;
|
|
};
|
|
|
|
systemd.network = {
|
|
links = {
|
|
"10-lan-hi" = {
|
|
matchConfig.PermanentMACAddress = "52:54:00:cc:3e:70";
|
|
linkConfig.Name = "lan-hi";
|
|
};
|
|
};
|
|
|
|
networks = {
|
|
"80-lan-hi" = mkMerge [
|
|
(networkdAssignment "lan-hi" assignments.hi)
|
|
{ networkConfig = vlanDns "hi"; }
|
|
];
|
|
};
|
|
};
|
|
|
|
my = {
|
|
secrets.key = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDcklmJp8xVRddNDU1DruKV+Ipim3Jtl6nE1oCWmpmZH";
|
|
server.enable = true;
|
|
deploy.node.hostname = "192.168.68.80";
|
|
|
|
firewall = {
|
|
tcp.allowed = [ 19999 ];
|
|
};
|
|
};
|
|
}
|
|
];
|
|
};
|
|
};
|
|
}
|