nixos

commit c4251b712426807b211c3d40f8969833e297d5b9
parent c6772495630b234e456ce2886776ffe86b158373
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sat, 27 Jan 2024 18:55:29 +0100

Meow

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
18
+++++++++++++++---
M
nixos/worker-2/configuration.nix
 | 
18
+++++++++++++++---

2 files changed, 30 insertions(+), 6 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -453,6 +453,17 @@ in {
           if net = 10.100.12.0/24 then accept;
         }
 
+        protocol bfd {
+          interface "*" {
+            interval 50 ms;
+          };
+        }
+
+        protocol direct direct1 {
+          ipv4;
+          interface "floating1";
+        }
+
         protocol device {
           scan time 10;
           interface "enp7s0", "floating1";
@@ -460,10 +471,11 @@ in {
 
         protocol kernel {
           ipv4 {                  # Connect protocol to IPv4 table by channel
-            import filter allowed_ips;
-            export filter allowed_ips;
+            export filter {
+              if proto = "direct1" then reject;
+              accept;
+            };
           };
-          persist;
         }
         protocol kernel {
           ipv6 { export all; };
diff --git a/nixos/worker-2/configuration.nix b/nixos/worker-2/configuration.nix
@@ -553,6 +553,17 @@ in {
           if net = 10.100.12.0/24 then accept;
         }
 
+        protocol bfd {
+          interface "*" {
+            interval 50 ms;
+          };
+        }
+
+        protocol direct direct1 {
+          ipv4;
+          interface "floating1";
+        }
+
         protocol device {
           scan time 10;
           interface "enp7s0";
@@ -560,10 +571,11 @@ in {
 
         protocol kernel {
           ipv4 {                  # Connect protocol to IPv4 table by channel
-            import filter allowed_ips;
-            export filter allowed_ips;
+            export filter {
+              if proto = "direct1" then reject;
+              accept;
+            };
           };
-          persist;
         }
         protocol kernel {
           ipv6 { export all; };