51f8ccef1a
- mango-dns -> wan-dns-update (module, script, systemd units): same job (keep ipv6-test.0ff.space's AAAA pointed at the current WAN address), now named for what actually provides the uplink (Nokia tethering). - Drop the dead `networking.dhcpcd.extraConfig` block in hosts/pinix/configuration.nix (end0 is the tnix maintenance link now, not an uplink; router-uplink.nix's mkForce for wan0 already won here). - Fix stale "Mango" wording in configuration.nix and localServices/tailscale.nix to describe the actual Nokia/pinix-router-dns setup. - Remove the now-dead transitional `enp1s0u1u2` dhcpcd stanza in router-uplink.nix -- wan0 has been the stable name across several reconnects/reboots. Not touched: scripts/pinix-reachability-probe.sh, scripts/configure-mango-dns.sh, docs/pinix-reboot-probe.md, docs/pinix-bind.md -- built entirely around the old Mango DNAT setup (uci/nft on the Mango itself), need their own rework for the Nokia uplink rather than a rename. Noted in docs/pinix-router-migration.md. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01C5FvfdKcQjEFQ4aLrepcS1
33 lines
1.1 KiB
Nix
33 lines
1.1 KiB
Nix
{ config, pkgs, ... }:
|
|
{
|
|
# Uplink war bis 12.09.2026 der Mango-Router, ist seit der Migration
|
|
# (docs/pinix-router-migration.md) das Nokia 6300 per USB-Tethering.
|
|
# NAT66 macht pinix' beobachtete Quelladresse die jeweils aktuelle
|
|
# oeffentliche IPv6 des Telefons. Reuse des bestehenden verschluesselten
|
|
# DNS-Tokens; kein Token auf dem Router noetig.
|
|
systemd.services.wan-dns-update = {
|
|
description = "Update WAN IPv6 DNS for web and remote SSH";
|
|
wants = [ "network-online.target" ];
|
|
after = [ "network-online.target" ];
|
|
path = [ pkgs.bash pkgs.curl pkgs.jq ];
|
|
script = "bash ${../../../scripts/update-wan-dns.sh}";
|
|
serviceConfig = {
|
|
Type = "oneshot";
|
|
EnvironmentFile = config.age.secrets.traefik.path;
|
|
DynamicUser = true;
|
|
NoNewPrivileges = true;
|
|
ProtectSystem = "strict";
|
|
ProtectHome = true;
|
|
PrivateTmp = true;
|
|
TimeoutStartSec = "100s";
|
|
};
|
|
};
|
|
systemd.timers.wan-dns-update = {
|
|
wantedBy = [ "timers.target" ];
|
|
timerConfig = {
|
|
OnBootSec = "30s";
|
|
OnUnitInactiveSec = "60s";
|
|
AccuracySec = "5s";
|
|
};
|
|
};
|
|
}
|