os/kay/modules/network/ppp/default.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

{ config, pkgs, ... }:

let
  inetVlan = 1003;
  wanInterface = "enp3s0";
in
{
  sops.secrets = {
    "ppp/chap-secrets".sopsFile = ./secrets.yaml;
    "ppp/pap-secrets".sopsFile = ./secrets.yaml;
    "ppp/username".sopsFile = ./secrets.yaml;
  };

  networking = {
    tempAddresses = "disabled";
    vlans.wan = {
      id = inetVlan;
      interface = wanInterface;
    };
  };

  services.pppd = {
    enable = true;

    config = ''
      plugin pppoe.so
      debug

      nic-wan
      defaultroute
      ipv6 ::1337,
      noauth

      persist
      lcp-echo-adaptive
      lcp-echo-interval 1
      lcp-echo-failure 5
    '';

    script."01-ipv6-ra" = {
      type = "ip-up";
      runtimeInputs = [ pkgs.procps ];

      text = ''
        sysctl net.ipv6.conf.ppp0.accept_ra=2
      '';
    };

    peers.keralavision = {
      enable = true;
      autostart = true;
      configFile = config.sops.secrets."ppp/username".path;
    };

    secret = {
      chap = config.sops.secrets."ppp/chap-secrets".path;
      pap = config.sops.secrets."ppp/pap-secrets".path;
    };
  };
}