bcbfc91a11
Due to an unfathomable issue where I would need to recompile with full debug keepalived, keepalived seems to be not seeing the multicast packets on the vrrp-router and thus we need to fallback to the disgusting unicast solution. Well, let's move on.
29 lines
640 B
Nix
29 lines
640 B
Nix
{ config, pkgs, lib, ... }:
|
|
{
|
|
krz-router = {
|
|
enable = true;
|
|
enablePrimary = false;
|
|
routerId = 2;
|
|
virtualRouterId = 51;
|
|
vip = "129.199.146.230";
|
|
rip = "129.199.146.232";
|
|
trunkPort.macAddress = "92:E3:9C:CE:EF:15";
|
|
virtualNeighbors = [ 1 ];
|
|
};
|
|
|
|
# systemd.services."systemd-networkd".environment.SYSTEMD_LOG_LEVEL = "debug";
|
|
environment.systemPackages = [ pkgs.tcpdump pkgs.wireguard-tools ];
|
|
|
|
# Zone based firewall
|
|
|
|
# Flow accounting in PostgreSQL.
|
|
services.postgresql = {
|
|
enable = true;
|
|
ensureUsers = [];
|
|
};
|
|
# services.ulogd = {
|
|
# enable = true;
|
|
# settings = {
|
|
# };
|
|
# };
|
|
}
|