dfeeb1c4ea
Now, the Proxmox can be accessed while redeploying one of the router!
28 lines
614 B
Nix
28 lines
614 B
Nix
{ config, pkgs, lib, ... }:
|
|
{
|
|
krz-router = {
|
|
enable = true;
|
|
enablePrimary = false;
|
|
routerId = 2;
|
|
vip = "129.199.146.230";
|
|
rip = "129.199.146.232";
|
|
trunkPort.macAddress = "92:E3:9C:CE:EF:15";
|
|
virtualNeighbors = [ 1 ];
|
|
};
|
|
|
|
# systemd.services."systemd-networkd".environment.SYSTEMD_LOG_LEVEL = "debug";
|
|
environment.systemPackages = [ pkgs.tcpdump pkgs.wireguard-tools ];
|
|
|
|
# Zone based firewall
|
|
|
|
# Flow accounting in PostgreSQL.
|
|
services.postgresql = {
|
|
enable = true;
|
|
ensureUsers = [];
|
|
};
|
|
# services.ulogd = {
|
|
# enable = true;
|
|
# settings = {
|
|
# };
|
|
# };
|
|
}
|