78 lines
1.8 KiB
Nix
78 lines
1.8 KiB
Nix
{ ... }:
|
|
|
|
{
|
|
|
|
networking.vlans."enp1s0.205" = {
|
|
id = 205;
|
|
interface = "enp1s0";
|
|
};
|
|
networking.interfaces."enp1s0.205".ipv6.addresses = [
|
|
{ address = "fe80::1"; prefixLength = 64; }
|
|
{ address = "fd00:152:152:205::1"; prefixLength = 64; }
|
|
];
|
|
networking.interfaces."enp1s0.205".ipv4.addresses = [
|
|
{ address = "10.152.205.1"; prefixLength = 24; }
|
|
];
|
|
|
|
# Enable NTP
|
|
networking.firewall.interfaces."enp1s0.205".allowedUDPPorts = [ 123 ];
|
|
|
|
services.radvd.config = ''
|
|
interface enp1s0.205 {
|
|
AdvSendAdvert on;
|
|
MaxRtrAdvInterval 30;
|
|
prefix ::/64 {
|
|
AdvValidLifetime 300;
|
|
AdvPreferredLifetime 120;
|
|
};
|
|
RDNSS fd00:152:152::1 {};
|
|
DNSSL iot.clerie.de {};
|
|
};
|
|
'';
|
|
|
|
services.kea.dhcp4 = {
|
|
settings = {
|
|
interfaces-config = {
|
|
interfaces = [ "enp1s0.205" ];
|
|
};
|
|
subnet4 = [
|
|
{
|
|
id = 205;
|
|
subnet = "10.152.205.0/24";
|
|
pools = [
|
|
{
|
|
pool = "10.152.205.100 - 10.152.205.240";
|
|
}
|
|
];
|
|
option-data = [
|
|
{
|
|
name = "routers";
|
|
data = "10.152.205.1";
|
|
}
|
|
{
|
|
name = "domain-name-servers";
|
|
data = "10.152.0.1";
|
|
}
|
|
{
|
|
name = "domain-name";
|
|
data = "iot.clerie.de";
|
|
}
|
|
{
|
|
name = "time-servers";
|
|
data = "10.152.0.1";
|
|
}
|
|
];
|
|
}
|
|
];
|
|
};
|
|
};
|
|
|
|
clerie.firewall.extraForwardFilterCommands = ''
|
|
# Allow access from Heimnetz to IOT devices
|
|
ip46tables -A forward-filter -i enp2s0 -o enp1s0.205 -j ACCEPT
|
|
ip46tables -A forward-filter -i enp1s0.205 -j DROP
|
|
ip46tables -A forward-filter -o enp1s0.205 -j DROP
|
|
'';
|
|
|
|
}
|