nilsandClaude Sonnet 5.5
6038367252
IPv6: router.wan.ipv6.enable mirrors the existing uplink config (DHCPv6 with WithoutRA=solicit, delegated prefix). The ISP delegates a single /64, so exactly one LAN may claim it via router.lans.<name>.ipv6.pd (asserted); other LANs stay IPv4-only. SLAAC only, no NAT66. PPPoE: router.wan.ipv4.type = "pppoe" runs pppd on an optional VLAN of the uplink, with the password read from a file at service start (never the Nix store). NAT, forwarding and MSS clamping (MTU 1492) use the derived PPP device; native IPv6 stays on the untagged link. Tests: basic.nix is parameterised by uplink type; the pppoe variant uses a fake ISP with pppoe-server (VLAN 7, CHAP). Both variants cover IPv6 PD, SLAAC, routing without NAT and WAN-deny. Assertion tests gain PD/PPPoE cases and a full-system evaluation step. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
11 lines
259 B
Nix
11 lines
259 B
Nix
{ self, pkgs }:
|
|
{
|
|
basic = import ./basic.nix { inherit self pkgs; };
|
|
pppoe = import ./basic.nix {
|
|
inherit self pkgs;
|
|
wan4 = "pppoe";
|
|
};
|
|
lib = import ./lib.nix { inherit pkgs; };
|
|
assertions = import ./assertions.nix { inherit self pkgs; };
|
|
}
|