blob: dba81120a71db191bd20b030484eda393ee965ac (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
|
{ config, lib, pkgs, ... }:
with lib;
let
cfg = config.services.yggdrasilTinc;
borealis-up = pkgs.writeScript "borealis-up.sh" ''
#!${pkgs.stdenv.shell}
${pkgs.nettools}/bin/route add -net 10.141.1.0 netmask 255.255.255.0 gw 10.141.1.1 dev $INTERFACE metric 9999
${optionalString cfg.useDNS ''
${pkgs.openresolv}/bin/resolvconf -m 0 -a tinc.yggdrasil <<EOF
domain yggdrasil
nameserver 10.141.1.1
EOF
''}
'';
borealis-down = pkgs.writeScript "borealis-down.sh" ''
#!${pkgs.stdenv.shell}
${pkgs.nettools}/bin/route del -net 10.141.1.0 netmask 255.255.255.0 gw 10.141.1.1 dev $INTERFACE
${optionalString cfg.useDNS ''
${pkgs.openresolv}/bin/resolvconf -d tinc.yggdrasil
''}
'';
in {
options = {
services.yggdrasilTinc = {
enable = mkEnableOption "yggdrasil tinc network";
connect = mkOption {
default = true;
type = types.bool;
description = ''
Connect to central server
'';
};
useDNS = mkOption {
default = true;
type = types.bool;
description = ''
Use borealis as primary dns server
'';
};
name = mkOption {
default = config.networking.hostName;
type = types.str;
description = ''
Node identifier
'';
};
interfaceConfig = mkOption {
default = {};
description = ''
Additional configuration for the generated network interface
'';
};
};
};
config = mkIf cfg.enable {
security.sudo = {
enable = true;
extraConfig = ''
tinc.yggdrasil ${config.networking.hostName} = (root) NOPASSWD: SETENV: ${borealis-up}, ${borealis-down}
'';
};
services.customTinc.networks."yggdrasil" = {
inherit (cfg) name interfaceConfig;
debugLevel = 2;
hosts = ( import ./hosts/yggdrasil.nix );
extraConfig = ''
PingTimeout = 30
${optionalString cfg.connect "ConnectTo = ymir"}
'';
scripts = {
"hosts/borealis-up" = ''
#!${pkgs.stdenv.shell}
exec ${config.security.wrapperDir}/sudo -En ${borealis-up}
'';
"hosts/borealis-down" = ''
#!${pkgs.stdenv.shell}
exec ${config.security.wrapperDir}/sudo -En ${borealis-down}
'';
};
};
};
}
|
