summaryrefslogblamecommitdiff
path: root/hosts/kay/modules/network.nix
blob: 12788c6e4fe3dff89d27a7a3f60bf1cd1872a5f5 (plain) (tree) 
b3a714f









bf8a48e




b3a714f





















































1
2
3
4
5
6
7
8
9

10
11
12
13

14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66









                                  



                   




















































                                                                                                                   
{ config, pkgs, ... }:

let
  inetVlan = 722;
  wanInterface = "enp4s0";
  domain = config.userdata.domain;
  nameServer = "1.0.0.1";
in
{
  imports = [
    ./wireguard.nix
    ./router.nix
  ];

  sops.secrets = {
    "ppp/chap-secrets" = {};
    "ppp/pap-secrets" = {};
    "ppp/username" = {};
    "misc/namecheap.com" = {};
  };

  networking = {
    enableIPv6 = false;
    vlans.wan = {
      id = inetVlan;
      interface = wanInterface;
    };
  };

  services = {
    dnsmasq = {
      enable = true;
      settings.server = [ nameServer ];
    };
    pppd = {
      secret = {
        chap = config.sops.secrets."ppp/chap-secrets".path;
        pap = config.sops.secrets."ppp/pap-secrets".path;
      };
      enable = true;
      config = ''
        plugin pppoe.so
        nic-wan
        defaultroute
        noauth
      '';
      script."01-ddns" = {
      runtimeInputs = with pkgs; [ curl coreutils ];
      text = ''
        wan_ip="$4"
        api_key="$(cat ${config.sops.secrets."misc/namecheap.com".path})"
        auth_url="https://dynamicdns.park-your-domain.com/update?host=@&domain=${domain}&password=''${api_key}&ip="

        until curl --silent "$auth_url$wan_ip"; do
            sleep 5
        done
      '';
      };
      peers.bsnl = {
        enable = true;
        autostart = true;
        configFile = config.sops.secrets."ppp/username".path;
      };
    };
  };
}