feat(vault01): add admin ipv4

2025-04-05 18:37:34 +02:00 · 2025-04-05 18:37:34 +02:00 · ca9d1b1b1d
commit ca9d1b1b1d
parent 08e4576f06
1 changed files with 7 additions and 1 deletions
--- a/machines/nixos/vault01/networking.nix
+++ b/machines/nixos/vault01/networking.nix
@ -108,7 +108,10 @@ let

    vlan-admin = {
      Id = 3000;
-      address = [ "fd26:baf9:d250:8000::1/64" ];
+      address = [
+        "fd26:baf9:d250:8000::1/64"
+        "192.168.129.1/24"
+      ];
    };

    vlan-admin-ap = {
@ -372,6 +375,9 @@ in
                ip6 daddr {
                  fd26:baf9:d250::/48,
                } jump forward_reject;
+                ip daddr {
+                  192.168.129.0/24
+                } jump forward_reject;

                # These are being deployed, and so are not trusted
                ip saddr 10.0.255.0/24 jump forward_reject;