blob: 06018156192e5da5999e65b51cea62960bbe00b9 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
|
{ config, pkgs, ... }:
let
inetVlan = 722;
wanInterface = "enp0s20u1";
nameServer = "1.0.0.1";
domain = config.userdata.domain;
in
{
imports = [
./router.nix
./hurricane.nix
];
sops.secrets = {
"ppp/chap-secrets" = {};
"ppp/pap-secrets" = {};
"ppp/username" = {};
"misc/namecheap.com" = {};
};
networking = {
vlans.wan = {
id = inetVlan;
interface = wanInterface;
};
# isp checks this macid during ppp authentication
interfaces.${wanInterface}.macAddress = "c4:54:44:d5:17:68";
};
services = {
dnsmasq = {
enable = true;
settings.server = [ nameServer ];
};
pppd = {
enable = true;
config = ''
plugin pppoe.so
nic-wan
defaultroute
persist
noauth
debug
'';
peers.bsnl = {
enable = true;
autostart = true;
configFile = config.sops.secrets."ppp/username".path;
};
secret = {
chap = config.sops.secrets."ppp/chap-secrets".path;
pap = config.sops.secrets."ppp/pap-secrets".path;
};
script."01-ddns" = {
runtimeInputs = with pkgs; [ curl coreutils ];
text = ''
wan_ip="$4"
api_key="$(cat ${config.sops.secrets."misc/namecheap.com".path})"
auth_url="https://dynamicdns.park-your-domain.com/update?host=@&domain=${domain}&password=''${api_key}&ip="
until curl --silent "$auth_url$wan_ip"; do
sleep 5
done
'';
};
};
};
}
|
