kunsi/bundlewrap
1
0
Fork 0
Code Issues 2 Pull requests 1 Releases Activity

home.router: remove ipv6-only vlan

Browse source
This commit is contained in:
Franzi 2024-02-26 19:27:18 +01:00
parent c5550bf552
commit 3749be6144
Signed by: kunsi
GPG key ID: 12E3D2136B818350
1 changed files with 7 additions and 19 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

26
nodes/home/router.py
View file

@ -20,17 +20,13 @@ nodes['home.router'] = {
'enp1s0.1138': { 'enp1s0.1138': {
'ips': { 'ips': {
'172.19.138.1/24', '172.19.138.1/24',
'fd90:2017:0:1138::1/64', 'fe80::1/64',
}, },
}, },
'enp1s0.1139': { 'enp1s0.1139': {
'ips': { 'ips': {
'172.19.139.1/24', '172.19.139.1/24',
}, 'fe80::1/64',
},
'enp1s0.2000': {
'ips': {
'fd90:2017:0:2000::1/64',
}, },
}, },
}, },
@ -88,13 +84,8 @@ nodes['home.router'] = {
'50-router': [ '50-router': [
'ct state { related, established } accept', 'ct state { related, established } accept',
'iifname enp1s0.1138 accept', 'iifname enp1s0.1138 accept',
'iifname enp1s0.2000 accept',
'ip6 nexthdr ipv6-icmp accept', 'ip6 nexthdr ipv6-icmp accept',
'tcp dport 22 accept', 'tcp dport 22 accept',
# TODO remove this once a better solution exists
'udp dport 53 iifname enp1s0.1138 accept',
'udp dport 53 iifname enp1s0.2000 accept',
], ],
}, },
'prerouting': { 'prerouting': {
@ -107,7 +98,6 @@ nodes['home.router'] = {
'restrict-to': { 'restrict-to': {
'172.19.136.0/25', '172.19.136.0/25',
'172.19.138.0/24', '172.19.138.0/24',
'fd90:2017::/32',
}, },
'vhosts': { 'vhosts': {
'vnstat': { 'vnstat': {
@ -120,13 +110,12 @@ nodes['home.router'] = {
'interfaces': { 'interfaces': {
'enp1s0.1138': { 'enp1s0.1138': {
'rdnss': { 'rdnss': {
'fd90:2017:0:1138::1', 'fe80::1',
}, },
}, },
'enp1s0.1139': {}, 'enp1s0.1139': {
'enp1s0.2000': {
'rdnss': { 'rdnss': {
'fd90:2017:0:2000::1', 'fe80::1',
}, },
}, },
}, },
@ -134,7 +123,6 @@ nodes['home.router'] = {
'postfix': { 'postfix': {
'mynetworks': { 'mynetworks': {
'172.19.138.0/24', '172.19.138.0/24',
'fd90:2017::/32',
}, },
}, },
'pppd': { 'pppd': {
@ -152,9 +140,10 @@ nodes['home.router'] = {
}, },
}, },
'unbound': { 'unbound': {
'dns64': False,
'restrict-to': { 'restrict-to': {
'172.19.138.0/23', '172.19.138.0/23',
'fd90:2017::/32', 'fe80::/64',
}, },
}, },
'users': { 'users': {
@ -176,7 +165,6 @@ nodes['home.router'] = {
'targets': { 'targets': {
'enp1s0.1138': '1', 'enp1s0.1138': '1',
'enp1s0.1139': '2', 'enp1s0.1139': '2',
'enp1s0.2000': '3',
}, },
}, },
'wireguard': { 'wireguard': {