blob: 8ce69950a933454bdb2bb490f136469281b25d09 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
|
{ config, lib, ... }:
with lib;
let
routes = {
moritz = {
id = 14;
address = "192.168.0.12";
prefixLength = 24;
gateway = "192.168.0.1";
destination = "144.76.143.122";
};
hotelturm = {
id = 8;
address = "10.11.77.5";
prefixLength = 24;
gateway = "10.11.77.16";
destination = "10.11.7.0/24";
};
};
internalIf = config.heinrich.internalInterface;
externalIf = config.heinrich.externalInterface;
mkRouteConfig = name: cfg: {
key = "routes-${name}";
networking.vlans.${name} = {
inherit (cfg) id;
interface = externalIf;
};
networking.interfaces.${name}.ip4 = singleton {
inherit (cfg) address prefixLength;
};
systemd.network.networks."40-${name}".routes = singleton {
routeConfig.Gateway = cfg.gateway;
routeConfig.Destination = cfg.destination;
};
};
in {
imports = singleton ../common.nix ++ mapAttrsToList mkRouteConfig routes;
options.heinrich = {
internalInterface = mkOption {
type = types.str;
default = "enp7s0";
description = ''
The internal network interface where Heinrich is serving DHCP and DNS
requests.
'';
};
externalInterface = mkOption {
type = types.str;
default = "enp5s0";
description = ''
The external network interface where Heinrich is connected to the
internet.
'';
};
};
config = {
networking.useDHCP = false;
networking.interfaces.${externalIf}.ip4 = mkForce [];
networking.interfaces.${internalIf}.ip4 = lib.singleton {
address = "172.16.0.1";
prefixLength = 24;
};
services.dnsmasq.enable = true;
services.dnsmasq.resolveLocalQueries = false;
services.dnsmasq.extraConfig = ''
dhcp-range=172.16.0.100,172.16.0.254,12h
dhcp-option=3,172.16.0.1 # Gateway
dhcp-option=6,172.16.0.1 # DNS-server
local=/openlab.lan/
domain=openlab.lan
dhcp-leasefile=/var/db/dnsmasq/dhcp.leases
'';
systemd.services.dnsmasq-pre = {
description = "Pre-Init DNSMasq";
before = [ "dnsmasq.service" ];
wantedBy = [ "multi-user.target" ];
script = ''
mkdir -p /var/db/dnsmasq
chown dnsmasq:nogroup /var/db/dnsmasq
'';
serviceConfig.Type = "oneshot";
serviceConfig.RemainAfterExit = true;
};
users.motd = ''
0. Never touch a running system.
1. Dokumentiere alle trotz 0 erfolgten Änderungen im Github-Repo:
https://github.com/openlab-aux/labnetz-doku
2. Mit großer Macht geht große Verantwortung einher.
3. So weit!
4. ...
5. Reisst dir Hannes den Arsch auf, wenn Du die Punkte 0-2 ignorierst.
'';
# TODO: This is a dummy, replace it once we know about the real root fs.
fileSystems."/".label = "root";
boot.loader.grub.device = "nodev";
networking.useNetworkd = true;
networking.firewall.enable = false;
networking.nat.enable = true;
networking.nat.externalIP = routes.hotelturm.address;
networking.nat.externalInterface = "hotelturm";
networking.nat.internalIPs = [ "172.16.0.1/24" ];
networking.nat.internalInterfaces = [ internalIf ];
/* TODO!
services.openvpn.enable = true;
services.openvpn.servers.heinrich.config = ''
dev tun0
remote 144.76.143.122
ifconfig 10.9.8.2 10.9.8.1
secret /etc/openvpn/priv.key
comp-lzo
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
route 0.0.0.0 0.0.0.0
'';
*/
};
}
|
