lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

swann: tighten up IPv6 config

Browse source
This commit is contained in:
Luke Granger-Brown 2021-05-13 10:14:42 +00:00
parent 564c803136
commit 4fb2a9e8e3
1 changed files with 23 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

29
ops/nixos/swann/default.nix
View file

@ -40,14 +40,17 @@ in {
interfaces = {
ens-virginmedia = {
useDHCP = true;
ipv6.addresses = [
{ address = "2a02:88fd:f:d::2"; prefixLength = 64; }
];
};
ens-general = {
ipv4.addresses = [
{ address = "192.168.1.1"; prefixLength = 23; }
];
ipv6.addresses = [
{ address = "2a02:88fd:f:d::2"; prefixLength = 64; }
];
ipv6.routes = [
{ address = "2a02:88fd:f:d::"; prefixLength = 64; options.metric = 100; }
];
};
};
};
@ -225,9 +228,11 @@ in {
enable = true;
hosts = [
"8.8.8.8" # Google Public DNS
"2001:4860:4860::8888"
"youtube.com" "ads.google.com" "google.com"
"1.1.1.1" # Cloudflare DNS
"2606:4700:4700::1111"
"twitter.com"
@ -245,11 +250,23 @@ in {
# This is cursed.
services.ndppd = {
enable = true;
proxies.ens-virginmedia.rules."2a02:88fd:f:d::/64" = {
method = "iface";
interface = "ens-general";
proxies.ens-virginmedia = {
router = false;
rules."2a02:88fd:f:d::/64" = {
method = "iface";
interface = "ens-general";
};
};
};
networking.dhcpcd.extraConfig = ''
noipv6rs
interface ens-virginmedia
ipv6rs
iaid 1
ia_na 2
ia_pd 3 ens-general/1/64
'';
services.radvd = {
enable = true;
config = ''