From 8637b4729ac3248eb15910a3145d8ef760f59e2f Mon Sep 17 00:00:00 2001
From: Alex Auvolat <alex@adnab.me>
Date: Fri, 5 Nov 2021 21:44:54 +0100
Subject: Network config

---
 configuration.nix | 25 ++++++++++++++++++++++++-
 node/carcajou.nix |  6 ++++++
 node/cariacou.nix |  6 ++++++
 node/caribou.nix  |  6 ++++++
 4 files changed, 42 insertions(+), 1 deletion(-)

diff --git a/configuration.nix b/configuration.nix
index 9092f8f..5192986 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -38,7 +38,7 @@ in
   # Route internet traffic via USB modem (=phone) on other computer
   networking.nameservers = [ "9.9.9.9" ];
   networking.defaultGateway = {
-    address = "192.168.1.14";
+    address = "192.168.1.254";
     interface = "eno1";
   };
 
@@ -131,12 +131,33 @@ in
 
   # List services that you want to enable:
 
+  # Enable Yggdrasil networking
+  services.yggdrasil.enable = true;
+  services.yggdrasil.persistentKeys = true;
+  services.yggdrasil.config = {
+    Listen = [
+      "tcp://0.0.0.0:54312"
+    ];
+    Peers = [
+      "tcp://37.187.118.206:53102"
+      "tcp://192.168.1.21:54312"
+      "tcp://192.168.1.22:54312"
+      "tcp://192.168.1.23:54312"
+    ];
+    MulticastInterfaces = [
+      "eno1"
+    ];
+  };
+
   # Enable network time
   services.ntp.enable = true;
 
   # Enable the OpenSSH daemon.
   services.openssh.enable = true;
 
+  # Enable netdata monitoring
+  services.netdata.enable = true;
+
   # Enable Hashicorp Consul & Nomad
   services.consul.enable = true;
   services.consul.extraConfig =
@@ -193,6 +214,8 @@ in
     3900 3901               # Garage (internal RPC traffic)
     4646 4647 4648          # Nomad
     8500 8300 8301 8302     # Consul
+    19999                   # Netdata
+    54312                   # Yggdrasil
   ];
   networking.firewall.allowedUDPPorts = [
     4648                    # Nomad
diff --git a/node/carcajou.nix b/node/carcajou.nix
index a9f64c2..25b835c 100644
--- a/node/carcajou.nix
+++ b/node/carcajou.nix
@@ -12,4 +12,10 @@
       prefixLength = 24;
     }
   ];
+  # networking.interfaces.eno1.ipv6.addresses = [
+  #   {
+  #     address = "2a01:e0a:c:a720::22";
+  #     prefixLength = 64;
+  #   }
+  # ];
 }
diff --git a/node/cariacou.nix b/node/cariacou.nix
index c94d2b8..7d3c28f 100644
--- a/node/cariacou.nix
+++ b/node/cariacou.nix
@@ -12,4 +12,10 @@
       prefixLength = 24;
     }
   ];
+  # networking.interfaces.eno1.ipv6.addresses = [
+  #   {
+  #     address = "2a01:e0a:c:a720::21";
+  #     prefixLength = 64;
+  #   }
+  # ];
 }
diff --git a/node/caribou.nix b/node/caribou.nix
index 5b81c21..906b6fc 100644
--- a/node/caribou.nix
+++ b/node/caribou.nix
@@ -12,6 +12,12 @@
       prefixLength = 24;
     }
   ];
+  # networking.interfaces.eno1.ipv6.addresses = [
+  #   {
+  #     address = "2a01:e0a:c:a720::23";
+  #     prefixLength = 64;
+  #   }
+  # ];
 
   # OR use USB modem plugged in here
   #networking.interfaces.enp0s20u1.useDHCP = true;
-- 
cgit v1.2.3