From 10a262f7ef4cce5660465ce11da4097f9c987b39 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Karel=20Ko=C4=8D=C3=AD?= <cynerd@email.cz>
Date: Fri, 27 Jan 2023 15:13:41 +0100
Subject: nixos/router: replace dhcpd with kea

The ISC DHCP is EOL and the replacement is Kea DHCP.
---
 nixos/routers/router.nix | 92 ++++++++++++++++++++++++++++++++----------------
 1 file changed, 61 insertions(+), 31 deletions(-)

(limited to 'nixos')

diff --git a/nixos/routers/router.nix b/nixos/routers/router.nix
index f5c8668..e7994f0 100644
--- a/nixos/routers/router.nix
+++ b/nixos/routers/router.nix
@@ -75,39 +75,69 @@ in {
       nameservers = ["1.1.1.1" "8.8.8.8"];
     };
 
-    services.dhcpd4 = {
-      enable = true;
-      authoritative = true;
-      interfaces = ["brlan" "brguest"];
-      extraConfig = ''
-        option domain-name-servers 1.1.1.1, 8.8.8.8;
-        subnet ${ipv4.prefix2ip cnf.lanIP cnf.lanPrefix} netmask ${ipv4.prefix2netmask cnf.lanPrefix} {
-            range ${
-          ipv4.ipAdd cnf.lanIP cnf.lanPrefix cnf.dynIPStart
-        } ${
-          ipv4.ipAdd cnf.lanIP cnf.lanPrefix (cnf.dynIPStart + cnf.dynIPCount)
+    services.kea = {
+      dhcp4 = {
+        enable = true;
+        settings = {
+          lease-database = {
+            name = "/var/lib/kea/dhcp4.leases";
+            persist = true;
+            type = "memfile";
+          };
+          valid-lifetime = 4000;
+          renew-timer = 1000;
+          rebind-timer = 2000;
+          interfaces-config = {
+            interfaces = ["brlan" "brguest"];
+            service-sockets-max-retries = -1;
+          };
+          option-data = [
+            {
+              name = "domain-name-servers";
+              data = "1.1.1.1, 8.8.8.8";
+            }
+          ];
+          subnet4 = [
+            {
+              interface = "brlan";
+              subnet = "${ipv4.prefix2ip cnf.lanIP cnf.lanPrefix}/${toString cnf.lanPrefix}";
+              pools = let
+                ip_start = ipv4.ipAdd cnf.lanIP cnf.lanPrefix cnf.dynIPStart;
+                ip_end = ipv4.ipAdd cnf.lanIP cnf.lanPrefix (cnf.dynIPStart + cnf.dynIPCount);
+              in [{pool = "${ip_start} - ${ip_end}";}];
+              option-data = [
+                {
+                  name = "routers";
+                  data = ipv4.prefix2netmask cnf.lanPrefix;
+                }
+              ];
+              reservations = [
+                {
+                  duid = "e4:6f:13:f3:d5:be";
+                  ip-address = ipv4.ipAdd cnf.lanIP cnf.lanPrefix 60;
+                }
+              ];
+            }
+            {
+              interface = "brguest";
+              subnet = "192.168.1.0/24";
+              pools = [{pool = "192.168.1.50 - 192.168.1.254";}];
+              "option-data" = [
+                {
+                  name = "routers";
+                  data = "192.168.1.1";
+                }
+              ];
+            }
+          ];
         };
-            option routers ${cnf.lanIP};
-            option subnet-mask ${ipv4.prefix2netmask cnf.lanPrefix};
-            option broadcast-address ${ipv4.prefix2broadcast cnf.lanIP cnf.lanPrefix};
-        }
-        subnet 192.168.1.0 netmask 255.255.255.0 {
-          range 192.168.1.50 192.168.1.254;
-          option routers 192.168.1.1;
-          option subnet-mask 255.255.255.0;
-          option broadcast-address 192.168.1.255;
-        }
-      '';
-    };
-
-    services.dhcpd6 = {
-      # TODO
-      enable = false;
-      authoritative = true;
-      interfaces = ["brlan"];
-      extraConfig = ''
-      '';
+      };
+      # TODO dhcp6
     };
+    systemd.services.kea-dhcp4-server.after = [
+      "sys-subsystem-net-devices-brlan.device"
+      "sys-subsystem-net-devices-brguest.device"
+    ];
 
     services.kresd = {
       enable = false;
-- 
cgit v1.2.3