blob: 9ef8ee6ac95a641c86d9df649727be34b49d6d69 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
{ config, pkgs, ... }:
let
inetVlan = 722;
wanInterface = "enp4s0";
domain = config.userdata.domain;
nameServer = "1.0.0.1";
in
{
imports = [ ./router.nix ];
sops.secrets = {
"ppp/chap-secrets" = {};
"ppp/pap-secrets" = {};
"ppp/username" = {};
"misc/namecheap.com" = {};
};
networking = {
enableIPv6 = false;
vlans.wan = {
id = inetVlan;
interface = wanInterface;
};
};
services = {
dnsmasq = {
enable = true;
settings.server = [ nameServer ];
};
pppd = {
secret = {
chap = config.sops.secrets."ppp/chap-secrets".path;
pap = config.sops.secrets."ppp/pap-secrets".path;
};
enable = true;
config = ''
plugin pppoe.so
nic-wan
defaultroute
noauth
'';
script."01-ddns" = {
runtimeInputs = with pkgs; [ curl coreutils ];
text = ''
wan_ip="$4"
api_key="$(cat ${config.sops.secrets."misc/namecheap.com".path})"
auth_url="https://dynamicdns.park-your-domain.com/update?host=@&domain=${domain}&password=''${api_key}&ip="
until curl --silent "$auth_url$wan_ip"; do
sleep 5
done
'';
};
peers.bsnl = {
enable = true;
autostart = true;
configFile = config.sops.secrets."ppp/username".path;
};
};
};
}
|
