define sketchy-router

README.md

@@ -10,7 +10,7 @@ Please also keep our [Service & Responsibility Page](https://eh22.easterhegg.eu/
 
 - Hypervisor
   - CCCHH IPMI Address: http://172.31.201.56
-  - CCCHH Proxmox Address: https://10.31.210.248:8006/
+  - eh22-mgmt Proxmox Access: https://10.20.25.1:8006/
 
 
 ## Password & Secret Management

systems/default.nix

@@ -40,6 +40,9 @@ in
   # prod hosts
   "auth-dns.noc.eh22.intern" = mkSystem "x86_64-linux" "auth-dns.noc.eh22.intern";
 
+  # staging temp infra
+  "sketchy-router.noc.eh22.intern" = mkSystem "x86_64-linux" "sketchy-router.noc.eh22.intern";
+
   # misc hosts
   "test.eh22.intern" = mkSystem "x86_64-linux" "test.eh22.intern";
   "installer" = mkSystem "x86_64-linux" "installer";

systems/sketchy-router.noc.eh22.intern.nix

@@ -0,0 +1,34 @@
+{
+  pkgs,
+  ...
+}:
+{
+  imports = [ ];
+
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = "1";
+    "net.ipv6.conf.all.forwarding" = "1";
+  };
+
+  networking.useDHCP = false;
+  networking.nftables.enable = true;
+  systemd.network = {
+    enable = true;
+    networks = {
+      "10-ethUpstream" = {
+        matchConfig.MACAddress = "BC:24:11:D2:69:8D";
+        address = [ "10.31.245.2/24" ];
+        gateway = [ "10.31.245.1" ];
+      };
+      "10-ethMgmt" = {
+        matchConfig.MACAddress = "BC:24:11:A3:38:4E";
+        address = [ "10.20.24.1/24" ];
+      };
+    };
+  };
+
+  # DO NOT CHANGE
+  # this defines the first version of NixOS that was installed on the machine so that programs with non-migratable data files are kept compatible
+  home-manager.users.noc.home.stateVersion = "24.11";
+  system.stateVersion = "24.11";
+}