From bd44fc6fcb1fe3df7b8a8c81839e34470fed7911 Mon Sep 17 00:00:00 2001
From: Grisha Shipunov
Date: Sun, 12 Jan 2025 21:32:36 +0100
Subject: authentik: init

---
 hosts/minime/networking/default.nix |  3 ++-
 hosts/minime/networking/uvm.nix     | 32 +++++++++++++++++++++++++++++---
 2 files changed, 31 insertions(+), 4 deletions(-)

(limited to 'hosts/minime/networking')

diff --git a/hosts/minime/networking/default.nix b/hosts/minime/networking/default.nix
index b1c044f..25e20b3 100644
--- a/hosts/minime/networking/default.nix
+++ b/hosts/minime/networking/default.nix
@@ -1,4 +1,5 @@
-{ ... }: {
+{ ... }:
+{
   imports = [
     ./uplink.nix
     ./uvm.nix
diff --git a/hosts/minime/networking/uvm.nix b/hosts/minime/networking/uvm.nix
index 15e498e..dfcb14c 100644
--- a/hosts/minime/networking/uvm.nix
+++ b/hosts/minime/networking/uvm.nix
@@ -1,8 +1,10 @@
-{ ... }: {
+{ ... }:
+{
+  # TODO: make a module
   systemd.network = {
     netdevs."10-uvm-br" = {
       netdevConfig = {
-        Kind = bridge;
+        Kind = "bridge";
         Name = "uvm-br";
       };
     };
@@ -13,7 +15,31 @@
         DHCPServer = false;
         IPv6SendRA = true;
       };
-      Address = [ ];
+      addresses = [
+        {
+          Address = "10.99.99.1/24";
+        }
+        {
+          Address = "fd12:3456:789a::1/64";
+        }
+      ];
+      ipv6Prefixes = [
+        {
+          Prefix = "fd12:3456:789a::/64";
+        }
+      ];
     };
+
+    networks."11-uvm-br" = {
+      matchConfig.Name = "uvm-*";
+      networkConfig.Bridge = "uvm-br";
+    };
+
+  };
+  networking.nat = {
+    enable = true;
+    enableIPv6 = true;
+    externalInterface = "enp90s0";
+    internalInterfaces = [ "uvm-br" ];
   };
 }
-- 
cgit v1.3.1