Add router-on-a-stick, commit-confirm rollback and an example config

- Allow the WAN link to also carry LANs when the uplink is PPPoE on a
  VLAN with IPv6 off; only the PPP device counts as an uplink then, so
  LAN traffic can never match WAN rules.
- Add router.rollback: router-arm / router-confirm / router-rollback
  plus `nix run .#deploy`, a commit-confirm deployment flow.
- Wait for the LAN devices instead of the uplink in networkd
  wait-online, so an unplugged uplink cannot block boot or activation.
- Add examples/desktop (single NIC, PPPoE on VLAN 1001) as
  nixosConfigurations.example, built as a flake check.

Covered by the onestick and rollback VM tests and new assertion cases.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

This commit is contained in:

nils

2026-10-27 23:09:09 +01:00

co-authored by

Claude Sonnet 5.5

parent 3f8f2f4199

commit 0653b5cf2f

14 changed files with 714 additions and 89 deletions

									
										modules/router/default.nix
									
		+1
		
												View File
												
				@@ -8,5 +8,6 @@

				    ./firewall.nix

				    ./dhcp.nix

				    ./dns.nix

				    ./rollback.nix

				  ];

				}