nixos

commit c1729c50b0b80dc0ec79f1714e9cfc238a8ac4ff
parent 9a18618e01bd515135b541780d1b1df4be3a640f
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 28 Jan 2024 03:48:20 +0100

Debug

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
35
+++++++++++++++++++++++++++++++++++
M
nixos/worker-2/configuration.nix
 | 
35
+++++++++++++++++++++++++++++++++++

2 files changed, 70 insertions(+), 0 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -171,6 +171,41 @@ in {
           Name = "floating1";
         };
       };
+      "20-v6" = {
+        matchConfig = {
+          MACAddress = "96:00:02:44:cf:52";
+        };
+        address = [
+          "49.13.24.105/32"
+          "2a01:4f8:c012:492::1/64"
+        ];
+        routes = [
+          {routeConfig.Gateway = "fe80::1";}
+          {
+            routeConfig = {
+              Gateway = "172.31.1.1";
+              GatewayOnLink = true;
+            };
+          }
+
+          # prevent some local traffic Hetzner doesn't like
+          #{ routeConfig = { Destination = "172.16.0.0/12"; Type = "unreachable"; }; }
+          {
+            routeConfig = {
+              Destination = "192.168.0.0/16";
+              Type = "unreachable";
+            };
+          }
+
+          # { routeConfig = { Destination = "10.0.0.0/8"; Type = "unreachable"; }; }
+          {
+            routeConfig = {
+              Destination = "fc00::/7";
+              Type = "unreachable";
+            };
+          }
+        ];
+      };
     };
   };
 
diff --git a/nixos/worker-2/configuration.nix b/nixos/worker-2/configuration.nix
@@ -150,6 +150,41 @@ in {
           Name = "gre_worker1";
         };
       };
+      "20-v6" = {
+        matchConfig = {
+          MACAddress = "96:00:02:97:a7:51";
+        };
+        address = [
+          "37.27.5.79/32"
+          "2a01:4f9:c012:54d3::/64"
+        ];
+        routes = [
+          {routeConfig.Gateway = "fe80::1";}
+          {
+            routeConfig = {
+              Gateway = "172.31.1.1";
+              GatewayOnLink = true;
+            };
+          }
+
+          # prevent some local traffic Hetzner doesn't like
+          #{ routeConfig = { Destination = "172.16.0.0/12"; Type = "unreachable"; }; }
+          {
+            routeConfig = {
+              Destination = "192.168.0.0/16";
+              Type = "unreachable";
+            };
+          }
+
+          # { routeConfig = { Destination = "10.0.0.0/8"; Type = "unreachable"; }; }
+          {
+            routeConfig = {
+              Destination = "fc00::/7";
+              Type = "unreachable";
+            };
+          }
+        ];
+      };
     };
   };