lukegb/depot
1
0
Fork 0
Code Issues 1 Pull requests Projects Packages Activity Actions

clouvider-lon01: add minotarproxy IPs

Browse source
This commit is contained in:
Luke Granger-Brown 2020-11-04 16:41:15 +00:00
parent 4da102053c
commit 86a09dab73
2 changed files with 27 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
ops/nixos/clouvider-lon01/default.nix
View file

@ -105,6 +105,11 @@ in {
ipv4.addresses = [{ address = "185.198.188.29"; prefixLength = 31; }]; ipv4.addresses = [{ address = "185.198.188.29"; prefixLength = 31; }];
ipv6.addresses = [{ address = "2a0a:54c0:0:17::2"; prefixLength = 126; }]; ipv6.addresses = [{ address = "2a0a:54c0:0:17::2"; prefixLength = 126; }];
}; };
interfaces.lo = {
ipv4.addresses = [{ address = "127.0.0.1"; prefixLength = 8; }] ++ (
map (n: { address = "92.118.29.${toString n}"; prefixLength = 32; }) (lib.range 225 253));
ipv6.addresses = [{ address = "::1"; prefixLength = 128; }];
};
firewall.allowPing = true; firewall.allowPing = true;
firewall.allowedTCPPorts = [ firewall.allowedTCPPorts = [
80 443 # HTTP/nginx 80 443 # HTTP/nginx
@ -142,6 +147,9 @@ in {
local = { local = {
routerID = "185.198.188.29"; routerID = "185.198.188.29";
}; };
export = {
v4 = ["92.118.28.0/24" "92.118.29.0/24"];
};
peering = { peering = {
clouvider = { clouvider = {
local = local // { local = local // {

22
ops/nixos/lib/bgp.nix
View file

@ -113,6 +113,20 @@ in {
}; };
}); });
}; };
export = mkOption { # lukegbgp.config.export
type = submodule {
options = {
v4 = mkOption { # lukegbgp.config.export.v4
type = listOf str;
default = ["92.118.31.0/24"];
};
v6 = mkOption { # lukegbgp.config.export.v6
type = listOf str;
default = ["2a09:a440::/48"];
};
};
};
};
}; };
}; };
}; };
@ -151,10 +165,11 @@ in {
bgp_ext_community.add((ro, 205479, 2001)); bgp_ext_community.add((ro, 205479, 2001));
bgp_ext_community.add((ro, 205479, 2002)); bgp_ext_community.add((ro, 205479, 2002));
bgp_ext_community.add((ro, 205479, 2003)); bgp_ext_community.add((ro, 205479, 2003));
bgp_ext_community.add((ro, 205479, 3000));
accept; accept;
}; };
}; };
route 92.118.31.0/24 blackhole; ${lib.concatMapStrings (ip: "route ${ip} blackhole;") config.services.lukegbgp.config.export.v4}
}; };
protocol static export6 { protocol static export6 {
ipv6 { ipv6 {
@ -164,10 +179,11 @@ in {
bgp_ext_community.add((ro, 205479, 2001)); bgp_ext_community.add((ro, 205479, 2001));
bgp_ext_community.add((ro, 205479, 2002)); bgp_ext_community.add((ro, 205479, 2002));
bgp_ext_community.add((ro, 205479, 2003)); bgp_ext_community.add((ro, 205479, 2003));
bgp_ext_community.add((ro, 205479, 3000));
accept; accept;
}; };
}; };
route 2a09:a440::/48 blackhole; ${lib.concatMapStrings (ip: "route ${ip} blackhole;") config.services.lukegbgp.config.export.v6}
}; };
''; '';
}; };
@ -181,4 +197,4 @@ in {
"net.ipv6.conf.all.autoconf" = 0; "net.ipv6.conf.all.autoconf" = 0;
}; };
}; };
} }