infrastructure/machines/router04/router.nix

{ config, pkgs, lib, ... }: 
{
  krz-router = {
    enable = true;
    enablePrimary = false;
    routerId = 2;
    virtualRouterId = 51;
    vip = "129.199.146.230";
    rip = "129.199.146.232";
    trunkPort.macAddress = "92:E3:9C:CE:EF:15";
    virtualNeighbors = [ 1 ];
  };

  # systemd.services."systemd-networkd".environment.SYSTEMD_LOG_LEVEL = "debug";
  environment.systemPackages = [ pkgs.tcpdump pkgs.wireguard-tools ];

  # Zone based firewall

  # Flow accounting in PostgreSQL.
  services.postgresql = {
    enable = true;
    ensureUsers = [];
  };
#  services.ulogd = {
#    enable = true;
#    settings = {
#    };
#  };
}