Simon Bruder
0cbdc22d4e
shinobu/router: Add printer vlan
2024-09-22 12:54:37 +02:00
Simon Bruder
b55cc2deaf
shinobu/router: Allow adding static hosts
...
This is required to have them available in nftables rules without too
much headache.
2024-09-22 11:27:52 +02:00
Simon Bruder
a8d170fd0e
shinobu/router/nft: Fix typo
2024-09-08 13:30:21 +02:00
Simon Bruder
eea16ca276
shinobu/router: Add ability to bypass HE tunnel
2024-09-08 13:30:19 +02:00
Simon Bruder
959f7be3d0
Connect home network with IPv6 addresses
...
It adds a bit of latency (and is definitely not the best solution in
theory), but finally allows dropping IPv6 NAT and it works within the
constraits my home network has to live in.
2024-09-08 13:30:18 +02:00
Simon Bruder
ef2c667bfe
shinobu: Add NTP server
...
This also changes the firewall rules for the IoT network to no longer
accept connections to ntp.org pool hosts over 123/UDP. All clients
should use the local NTP server.
2024-02-15 13:39:42 +01:00
Simon Bruder
10b8d432d5
Relicense
...
This applies the REUSE specification to the repository, so the licensing
information can be tracked for every file individually.
2024-01-13 14:39:22 +01:00
Simon Bruder
9e545950f5
shinobu/wlan: Drop
...
It was not used anyway.
2024-01-06 00:10:02 +01:00
Simon Bruder
9d7d7cb592
wordclock-dimmer: Migrate to shinobu
2023-12-31 17:31:17 +01:00
Simon Bruder
4f536a00d2
Switch home domain to shinonome-lab.de
...
When having DNSSEC activated (as it is the case on sbruder.de), dnsmasq
interfering in queries for hosts on the LAN often causes problems.
This domain is specifically for the case of not having DNSSEC on it.
2023-10-27 23:54:56 +02:00
Simon Bruder
7a7d38c2f0
shinobu/router: Fix nft set for ntp
...
Appartently, the family is not optional.
2023-10-24 21:36:40 +02:00
Simon Bruder
315cc1b50c
shinobu/router: Dynamically allow ntp for iot
2023-10-22 14:00:47 +02:00
Simon Bruder
3f9e9e15e9
shinobu/router: Disable hostapd
...
The wireless card only supports one AP, so I switched to an OpenWRT
stanadlone AP.
2023-10-22 14:00:47 +02:00
Simon Bruder
ef62aac941
shinobu/router: Add qdisc for guest network
2023-10-22 14:00:47 +02:00
Simon Bruder
4611e12772
shinobu/router: Add network segmentation
2023-10-22 14:00:42 +02:00
Simon Bruder
1740570d00
shinobu/router: Use callPackage for common
2023-10-18 20:04:04 +02:00
Simon Bruder
19da5e13b9
shinobu/router/tc: Properly use hex for identifiers
2023-10-18 20:01:57 +02:00
Simon Bruder
816004e80b
restic: Use QoS instead of uploadLimit
...
This implements a crude mechanism for signalling my router to add the
packets to its own qdisc.
The way in which this is implemented with nftables is hacky because of
NixOS’ limitations on build-time checking (which obviously can’t know
about the existence of cgroups on the target).
2023-10-07 22:49:47 +02:00
Simon Bruder
afc9013506
shinobu/router: Implement QoS using HTB
...
This is an initial implementation and probably still needs tuning.
2023-10-07 22:49:26 +02:00
Simon Bruder
3d880316de
shinobu/router: Disable wg-upstream
...
This only complicates many things and creates too much overhead on such
a slow connection.
2023-10-04 23:19:44 +02:00
Simon Bruder
642fea6b8e
shinobu/router: Route select protocols directly
2023-10-04 23:19:44 +02:00
Simon Bruder
7a7b385b44
shinobu/router: Change nft variable source
2023-10-04 23:19:44 +02:00
Simon Bruder
8ecf4ecbfd
shinobu/router: Split configuration
2023-10-04 23:19:43 +02:00
Simon Bruder