home.router: rotate all the vlans

This commit is contained in:
Franzi 2023-03-27 13:52:08 +02:00 committed by Franzi
parent fe9716088a
commit 317a3df11d

View file

@ -16,16 +16,16 @@ nodes['home.router'] = {
}, },
'metadata': { 'metadata': {
'interfaces': { 'interfaces': {
'enp1s0.23': { 'enp1s0.1138': {
'ips': {
'172.19.139.1/24',
},
},
'enp1s0.42': {
'ips': { 'ips': {
'172.19.138.1/24', '172.19.138.1/24',
}, },
}, },
'enp1s0.1139': {
'ips': {
'172.19.139.1/24',
},
},
}, },
'backups': { 'backups': {
'exclude_from_backups': True, 'exclude_from_backups': True,
@ -47,18 +47,7 @@ nodes['home.router'] = {
}, },
'dhcpd': { 'dhcpd': {
'subnets': { 'subnets': {
'enp1s0.23': { 'enp1s0.1138': {
'range_lower': '172.19.139.200',
'range_higher': '172.19.139.250',
'subnet': '172.19.139.0/24',
'options': {
'broadcast-address': '172.19.139.255',
'domain-name-servers': '172.19.139.1',
'routers': '172.19.139.1',
'subnet-mask': '255.255.255.0',
},
},
'enp1s0.42': {
'range_lower': '172.19.138.100', 'range_lower': '172.19.138.100',
'range_higher': '172.19.138.250', 'range_higher': '172.19.138.250',
'subnet': '172.19.138.0/24', 'subnet': '172.19.138.0/24',
@ -71,6 +60,17 @@ nodes['home.router'] = {
'subnet-mask': '255.255.255.0', 'subnet-mask': '255.255.255.0',
}, },
}, },
'enp1s0.1139': {
'range_lower': '172.19.139.200',
'range_higher': '172.19.139.250',
'subnet': '172.19.139.0/24',
'options': {
'broadcast-address': '172.19.139.255',
'domain-name-servers': '172.19.139.1',
'routers': '172.19.139.1',
'subnet-mask': '255.255.255.0',
},
},
}, },
}, },
'hosts': { 'hosts': {
@ -118,8 +118,8 @@ nodes['home.router'] = {
}, },
'radvd': { 'radvd': {
'interfaces': { 'interfaces': {
'enp1s0.23': {}, 'enp1s0.1138': {},
'enp1s0.42': {}, 'enp1s0.1138': {},
}, },
}, },
'postfix': { 'postfix': {
@ -130,7 +130,7 @@ nodes['home.router'] = {
'pppd': { 'pppd': {
'username': vault.decrypt('encrypt$gAAAAABfruZ5AZbgJ3mfMLWqIMx8o4bBRMJsDPD1jElh-vWN_gnhiuZVjrQ1-7Y6zDXNkxXiyhx8rxc2enmvo26axd7EBI8FqknCptXAPruVtDZrBCis4TE='), 'username': vault.decrypt('encrypt$gAAAAABfruZ5AZbgJ3mfMLWqIMx8o4bBRMJsDPD1jElh-vWN_gnhiuZVjrQ1-7Y6zDXNkxXiyhx8rxc2enmvo26axd7EBI8FqknCptXAPruVtDZrBCis4TE='),
'password': vault.decrypt('encrypt$gAAAAABfruaXEDkaFksFMU8g97ydWyJF8p2KcSDJJBlzaOLDsLL6oCDYjG1kMPVESOzqjn8ThtSht1uZDuMCstA-sATmLS-EWQ=='), 'password': vault.decrypt('encrypt$gAAAAABfruaXEDkaFksFMU8g97ydWyJF8p2KcSDJJBlzaOLDsLL6oCDYjG1kMPVESOzqjn8ThtSht1uZDuMCstA-sATmLS-EWQ=='),
'interface': 'enp1s0.100', 'interface': 'enp1s0.7',
'dyndns': { 'dyndns': {
'domain': 'franzi-home.kunbox.net', 'domain': 'franzi-home.kunbox.net',
'url': 'https://ns-primary.kunbox.net/nic/update?hostname=franzi-home.kunbox.net&myip={ip}', 'url': 'https://ns-primary.kunbox.net/nic/update?hostname=franzi-home.kunbox.net&myip={ip}',
@ -138,8 +138,8 @@ nodes['home.router'] = {
'password': vault.decrypt('encrypt$gAAAAABfr8Cq5M1hweeJTQAl0dLhFntdlw-QnkIYUQpY-_ycODVWOpyeAwjwOgWLSdsdXIUvqcoiXPZPV-BE12p5C42NGnj9r7sKYpoGz8xfuGIk6haMa2g='), 'password': vault.decrypt('encrypt$gAAAAABfr8Cq5M1hweeJTQAl0dLhFntdlw-QnkIYUQpY-_ycODVWOpyeAwjwOgWLSdsdXIUvqcoiXPZPV-BE12p5C42NGnj9r7sKYpoGz8xfuGIk6haMa2g='),
}, },
'nftables-rules.d': { 'nftables-rules.d': {
'inet filter forward iifname enp1s0.23 oif $INTERFACE accept', 'inet filter forward iifname enp1s0.1138 accept',
'inet filter forward iifname enp1s0.42 accept', 'inet filter forward iifname enp1s0.1139 oif $INTERFACE accept',
}, },
}, },
'unbound': { 'unbound': {
@ -161,7 +161,7 @@ nodes['home.router'] = {
}, },
}, },
'vnstat': { 'vnstat': {
'interface': 'enp1s0.100', 'interface': 'enp1s0.7',
}, },
'vm': { 'vm': {
'cpu': 2, 'cpu': 2,
@ -170,8 +170,8 @@ nodes['home.router'] = {
'wide-dhcp6c': { 'wide-dhcp6c': {
'source': 'ppp0', 'source': 'ppp0',
'targets': { 'targets': {
'enp1s0.23': '2', 'enp1s0.1138': '1',
'enp1s0.42': '1', 'enp1s0.1139': '2',
}, },
}, },
'wireguard': { 'wireguard': {