summaryrefslogtreecommitdiff
path: root/modules
diff options
context:
space:
mode:
authorKjetil Orbekk <kj@orbekk.com>2023-10-07 19:04:04 -0400
committerKjetil Orbekk <kj@orbekk.com>2023-10-07 19:04:04 -0400
commit1b75f59d12531d1085158a03a459ccdcbdb46bd6 (patch)
tree1088625ec630d908aeb3d2bbc25a874a6e9a72e6 /modules
parent64b402efae45e4ccd7cc24c0bf0682d8a4283026 (diff)
fix
Diffstat (limited to 'modules')
-rw-r--r--modules/router.nix5
1 files changed, 5 insertions, 0 deletions
diff --git a/modules/router.nix b/modules/router.nix
index 8ed2e76..a530645 100644
--- a/modules/router.nix
+++ b/modules/router.nix
@@ -26,6 +26,7 @@ let
devices}
ip link add router-vport type veth peer name dragon-vport netns router
ip link add vpn-vport type veth peer name dragonvpn-vport netns router
+ ip link add wg-vpn-vport type veth peer name wg-vpnlan-vport netns router
ip netns add vpn
ip netns exec vpn ip link set lo up
@@ -51,6 +52,7 @@ let
interfaces.wan-vport = { vlan = 10; type = "internal"; };
interfaces.lan-vport = { vlan = 100; type = "internal"; };
interfaces.vpnlan-vport = { vlan = 30; type = "internal"; };
+ interfaces.wg-vpnlan-vport = { vlan = 200; type = "internal"; };
interfaces.servers-vport = { vlan = 20; type = "internal"; };
interfaces.admin-vport = { vlan = 255; type = "internal"; };
interfaces.dragon-vport = { vlan = 20; };
@@ -79,6 +81,9 @@ let
ipv4.addresses = [{address = "10.10.255.18"; prefixLength = 24;}];
ipv4.routes = [{address = "10.10.255.0"; prefixLength = 24;}];
};
+ networking.interfaces.wg-vpnlan-vport = {
+ ipv6.addresses = [{address = "${vpnPrefix}::1"; prefixLength = 128; }];
+ };
networking.interfaces.vpnlan-vport = {
ipv4.addresses = [{address = "172.20.30.1"; prefixLength = 24;}];
ipv6.addresses = [{address = "2001:470:8e2e:30::1"; prefixLength = 64;}];