Add MVP router flake with VM test and tmux lab

router.* schema (wan, lans, dns.forwarders) compiled to systemd-networkd,
a generated nftables ruleset with NAT, Kea DHCPv4 and Unbound, plus build-time
assertions against lock-out and interface conflicts.

tests/basic.nix is a three-node VM test (upstream/router/client) covering WAN
DHCP, LAN DHCP and DNS, NAT, WAN-deny and LAN SSH/ping. `nix run .#lab` boots
the same topology in tmux with one console pane per VM and the driver REPL.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

This commit is contained in:

nils

2026-10-27 13:38:41 +01:00

co-authored by

Claude Sonnet 5.5

commit dcef7665b4

14 changed files with 630 additions and 0 deletions

									
										tests/default.nix
									
		+4
		
												View File
												
				@@ -0,0 +1,4 @@

				{ self, pkgs }:

				{

				  basic = import ./basic.nix { inherit self pkgs; };

				}