feat(vault01): add admin ipv4

machines/nixos/vault01/networking.nix

@@ -108,7 +108,10 @@ let
 
     vlan-admin = {
       Id = 3000;
-      address = [ "fd26:baf9:d250:8000::1/64" ];
+      address = [
+        "fd26:baf9:d250:8000::1/64"
+        "192.168.129.1/24"
+      ];
     };
 
     vlan-admin-ap = {
@@ -372,6 +375,9 @@ in
                 ip6 daddr {
                   fd26:baf9:d250::/48,
                 } jump forward_reject;
+                ip daddr {
+                  192.168.129.0/24
+                } jump forward_reject;
 
                 # These are being deployed, and so are not trusted
                 ip saddr 10.0.255.0/24 jump forward_reject;