Add MVP router flake with VM test and tmux lab

router.* schema (wan, lans, dns.forwarders) compiled to systemd-networkd,
a generated nftables ruleset with NAT, Kea DHCPv4 and Unbound, plus build-time
assertions against lock-out and interface conflicts.

tests/basic.nix is a three-node VM test (upstream/router/client) covering WAN
DHCP, LAN DHCP and DNS, NAT, WAN-deny and LAN SSH/ping. `nix run .#lab` boots
the same topology in tmux with one console pane per VM and the driver REPL.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

This commit is contained in:

nils

2026-10-27 13:38:41 +01:00

co-authored by

Claude Sonnet 5.5

commit dcef7665b4

14 changed files with 630 additions and 0 deletions

									
										modules/router/default.nix
									
		+10
		
												View File
												
				@@ -0,0 +1,10 @@

				{

				  imports = [

				    ./options.nix

				    ./assertions.nix

				    ./networking.nix

				    ./firewall.nix

				    ./dhcp.nix

				    ./dns.nix

				  ];

				}