Skyworks/skyworks-Nix-infra

Fork: 0

Skyworks / skyworks-Nix-infra

History for skyworks-Nix-infra / hosts / xlab-gateway / networking.nix

2026-03-23	234e1a5 Browse files » Update networking.nix physicsdolphin committed on 23 Mar
	408ef51 Browse files » Update networking.nix physicsdolphin committed on 23 Mar
	8ffd49b Browse files » add route from subnet to phicomm mgmt physicsdolphin committed on 23 Mar
2026-03-21	554b424 Browse files » fix gateway itself to .1 physicsdolphin committed on 21 Mar
2026-03-09	9394ffd Browse files » xlab-gateway: add ULA route for internal IPv6 reachability ... Route fd99:23eb:1682::/48 via wg-to-wgnet in main table so xlab-gateway and LAN clients can reach 10.0.0.1's IPv6 (fd99:23eb:1682::1). Without this, ULA traffic went through the WAN default route and got dropped. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 9 Mar
2026-03-09	30a833d Browse files » refactor xlab-gateway IPv6: /64 SLAAC, scoped policy routing, no NAT66 ... - Change LAN prefix from fd99:23eb:1682:fd:df::/80 to fd99:23eb:1682:1::/64 - Switch from DHCPv6 stateful to SLAAC (AdvAutonomous on, AdvManagedFlag off) - Add RDNSS in radvd pointing to fd99:23eb:1682::1 - Scope policy routing rules to LAN sources only (fixes gateway IPv6 breakage) - Remove NAT66 masquerade on wg-to-wgnet (10.0.0.1 routes fd99:23eb:1682:1::/64 natively) Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 9 Mar
2026-03-08	588cd28 Browse files » fix nftables syntax: use meta nfproto ipv6 in inet table ... Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 8 Mar
2026-03-08	4749ad1 Browse files » xlab-gateway: route client IPv6 through wg-to-wgnet ... - Re-add IPv6 default route (::/0) via wg-to-wgnet in table 1002 - Add NAT66 masquerade on wg-to-wgnet for client ULA→tunnel translation - Campus WAN has no IPv6 transit; wgnet provides it Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 8 Mar
2026-03-07	f4e6594 Browse files » xlab-gateway: fix IPv6 routing, clean up table names ... - Remove IPv6 default route from freedom table (1002) — wgnet peer doesn't forward IPv6, causing TLS resets on outbound connections - Remove Tsinghua IPv6 throw route (unnecessary without IPv6 default) - IPv6 now uses native WAN path instead of WireGuard tunnel - Rename table 1002 from typo 'wg-to-skywme' to 'freedom-wgnet' Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 7 Mar
2026-03-07	1f0408a Browse files » Initial skyworks infrastructure flake ... Unified NixOS configuration for skydick (storage server) and xlab-gateway (lab router). Flat module structure with shared common/users/ssh modules, agenix secrets, disko, and deploy-rs. Co-Authored-By: Claude Opus 4.6 <[email protected]> Dixiao-L committed on 7 Mar