@@ -47,0 +50,4 @@
+    extra-mods = mkOption {
+      type = types.attrsOf types.path;
+      description = "Additional files to be linked in mods-enabled.";
+      default = { };

@@ -47,0 +56,4 @@
+    extra-sites = mkOption {
+      type = types.attrsOf types.path;
+      description = "Additional files to be linked in sites-enabled.";
+      default = { };

@@ -47,0 +70,4 @@
+        ]
+      );
+      description = "Declare additionnal attributes to be listed in the dictionary.";
+      default = { };

@@ -80,0 +109,4 @@
+
+    checkConfiguration = mkOption {
+      type = types.bool;
+      description = "Check the configuration before starting the deamon. Usefull for debugging.";

@@ -107,2 +143,4 @@
+      startLimitBurst = 5;
 
       preStart = ''
+        rm -rf ${cfg.configDir}

@@ -165,2 +203,4 @@
           -e "s/whatever/$(cat "${cfg.privateKeyPasswordFile}")/"
 
+        # Build the dictionary
+        cat <<EOF > ${cfg.configDir}/dictionary

@@ -167,0 +210,4 @@
+            idList = builtins.genList (id: 3000 + id) (builtins.length attrs);
+          in
+          builtins.concatStringsSep "\n" (
+            zipListsWith ({ name, type }: id: "ATTRIBUTE ${name} ${toString id} ${type}") attrs idList

@@ -168,1 +231,3 @@
-        # ${pkgs.freeradius}/bin/radiusd -C -d ${cfg.configDir} -l stdout
+        ${
+          optionalString (!cfg.checkConfiguration) "# "
+        }${pkgs.freeradius}/bin/radiusd -C -d ${cfg.configDir} -l stdout

@@ -106,0 +183,4 @@
+          ${lib.getExe pkgs.ethtool} -K enp67s0f0np0 tx-vlan-offload off
+          ${lib.getExe pkgs.ethtool} -K enp67s0f0np0 tx-vlan-stag-hw-insert off
+          echo "Hardware for enp67s0f0np0 configured"
+        '';

@@ -0,0 +10,4 @@
+    broadIP = "10.0.${toString prefix24nb}.${toString (prefix27nb + 31)}";
+    interfaceName = "vlan-user-${toString vlan}";
+  };
+in

@@ -0,0 +11,4 @@
+    interfaceName = "vlan-user-${toString vlan}";
+  };
+in
+builtins.genList mkUserVlan 850

@@ -14,0 +15,4 @@
+    optionalString
+    imap0
+    attrsToList
+    getExe'

@@ -44,0 +43,4 @@
+      vlan = 4094 - id;
+      prefix24nb = (id + 1) / 8;
+      prefix27nb = (id + 1 - prefix24nb * 8) * 32;
+      prefixLength = 27;

@@ -44,0 +46,4 @@
+      prefixLength = 27;
+      netIP = "10.0.${toString prefix24nb}.${toString prefix27nb}";
+      servIP = "10.0.${toString prefix24nb}.${toString (prefix27nb + 1)}";
+      # broadIP = "10.0.${toString prefix24nb}.${toString (prefix27nb + 31)}";

@@ -47,3 +54,3 @@
       value = {
         Id = vlan;
-        address = [ "10.0.${builtins.toString prefix24nb}.${builtins.toString (prefix29nb + 1)}/29" ];
+        address = [ ];

@@ -50,0 +61,4 @@
+          };
+          linkConfig = {
+            Promiscuous = true;
+          };

@@ -106,0 +193,4 @@
+
+      systemd-networkd.serviceConfig = {
+        LimitNOFILE = 4096;
+      };