From a03996d7a11edc84e231f513ef134f9f58d44ccf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Karel=20Ko=C4=8D=C3=AD?= <cynerd@email.cz>
Date: Thu, 18 Aug 2022 08:43:38 +0200
Subject: nixos: work little bit on routers

---
 nixos/machine/adm-omnia.nix | 60 ++++++++++++++++++++++++++++++++++++++++++++-
 1 file changed, 59 insertions(+), 1 deletion(-)

(limited to 'nixos/machine/adm-omnia.nix')

diff --git a/nixos/machine/adm-omnia.nix b/nixos/machine/adm-omnia.nix
index f5ca827..c7c2063 100644
--- a/nixos/machine/adm-omnia.nix
+++ b/nixos/machine/adm-omnia.nix
@@ -6,7 +6,65 @@ with lib;
 
   config = {
     cynerd = {
-      openvpn.oldpersonal = true;
+      #openvpn.oldpersonal = true;
+    };
+
+    networking = {
+      # TODO we need vlan filtering to filter out guest and adm network
+      bridges = {
+        brlan = {
+          interfaces = [
+            "lan0" "lan1" "lan2" "lan3" "lan4"
+          ];
+        };
+        #brguest = {
+        #  interfaces = [
+        #    "brlan.2" #"mlan0host" "wlp1s0host"
+        #  ];
+        #};
+      };
+      interfaces.brlan = {
+        ipv4 = {
+          addresses = [{
+            address = config.cynerd.hosts.adm.omnia;
+            prefixLength = 24;
+          }];
+        };
+      };
+      # TODO localhost
+      nameservers = [ "1.1.1.1" "8.8.8.8" ];
+      dhcpcd.allowInterfaces = [ "eth2" ];
+    };
+
+    networking.wirelessAP = {
+      enable = true;
+      environmentFile = "/run/secrets/hostapd.env";
+      interfaces = {
+        "mlan0" = {
+          countryCode = "CZ";
+          ssid = "TurrisRules";
+          wpa = true;
+          wpaPassphrase = "@PASS_TURRIS_RULES@";
+        };
+        "wlp1s0" = {
+          countryCode = "CZ";
+          hwMode = "a";
+          channel = 36;
+          ieee80211ac = true;
+          ht_capab = ["HT40+" "LDPC" "SHORT-GI-20" "SHORT-GI-40" "TX-STBC" "RX-STBC1" "MAX-AMSDU-7935" "DSSS_CCK-40"];
+          vht_capab = ["RXLDPC" "SHORT-GI-80" "TX-STBC-2BY1" "RX-ANTENNA-PATTERN" "TX-ANTENNA-PATTERN" "RX-STBC-1" "MAX-MPDU-11454" "MAX-A-MPDU-LEN-EXP7"];
+          ssid = "TurrisRules5";
+          wpa = true;
+          wpaPassphrase = "@PASS_TURRIS_RULES@";
+          bss = {
+            "wlp1s0host" = {
+              ssid = "KocoviGuest";
+              wpa = true;
+              wpaPassphrase = "@PASS_KOCOVI@";
+            };
+          };
+        };
+      };
     };
 
   };
-- 
cgit v1.2.3