vidhar: dmz01

1 files changed, 22 insertions, 5 deletions

diff --git a/hosts/vidhar/network/dsl.nix b/hosts/vidhar/network/dsl.nix
index 21554b58..0ad598e6 100644
--- a/hosts/vidhar/network/dsl.nix
+++ b/hosts/vidhar/network/dsl.nix
@@ -95,6 +95,13 @@ in {
             rdnss = [{ servers = ["::"]; }];
             dnssl = [{ domain_names = ["yggdrasil"]; }];
           }
+          { name = "dmz01";
+            advertise = true;
+            verbose = true;
+            prefix = [{ prefix = "::/64"; }];
+            route = [{ prefix = "::/0"; }];
+            rdnss = [{ servers = ["::"]; }];
+          }
         ];
 
         debug = {
@@ -108,10 +115,17 @@ in {
       proxies = {
         ${pppInterface} = {
           router = true;
-          rules.lan = {
-            method = "iface";
-            interface = "lan";
-            network = "::/0";
+          rules = {
+            lan = {
+              method = "iface";
+              interface = "lan";
+              network = "::/0";
+            };
+            dmz01 = {
+              method = "iface";
+              interface = "dmz01";
+              network = "::/0";
+            };
           };
         };
       };
@@ -154,7 +168,9 @@ in {
       '';
 
       postStop = ''
-        ${pkgs.iproute2}/bin/ip -6 a show dev lan scope global | ${pkgs.coreutils}/bin/grep inet6 | ${pkgs.gawk}/bin/awk '{ print $2; }' | ${pkgs.findutils}/bin/xargs -I '{}' -- ${pkgs.iproute2}/bin/ip addr del '{}' dev lan
+        for dev in lan dmz01; do
+          ${pkgs.iproute2}/bin/ip -6 a show dev "''${dev}" scope global | ${pkgs.coreutils}/bin/grep inet6 | ${pkgs.gawk}/bin/awk '{ print $2; }' | ${pkgs.findutils}/bin/xargs -I '{}' -- ${pkgs.iproute2}/bin/ip addr del '{}' dev "''${dev}"
+        done
       '';
 
       serviceConfig = let
@@ -177,6 +193,7 @@ in {
           iaid 1195061668
           ipv6rs                 # enable routing solicitation for WAN adapter
           ia_pd 1 lan/0/64/0     # request a PD and assign it to the LAN
+          ia_pd 1 dmz01/1/64/0   # request a PD and assign it to dmz01
 
           reboot 0