@cryptotaxi247 / infra-1 / commits / 60ca29b1

Turn off the IPv6 tunnel

Sixxs is no longer: https://www.sixxs.net/sunset/

Eelco Dolstra committed Sep 4, 2017 at 14:52 UTC 60ca29b1f0528e114e7fcb80223dd6c928cc3769
1 file changed -33
delft/wendy.nix
-33
@@ -87,44 +87,11 @@ with lib;
87 };
88 '';
89
90 - # Force the sixxs tunnel to stay alive by periodically
91 - # pinging the other side. This is necessary to remain
92 - # reachable from the outside.
93 - systemd.services.ping-sixxs =
94 - { serviceConfig.ExecStart = "${pkgs.iputils}/sbin/ping -c 1 2001:610:600:88d::1";
95 - serviceConfig.Type = "oneshot";
96 - startAt = "*:0/10";
97 - };
98 -
90 networking = {
91
92 firewall.allowedTCPPorts = [ 80 443 10051 5432 5999 ];
93 firewall.allowedUDPPorts = [ 53 67 ];
94
104 - localCommands =
105 - ''
106 - # Cleanup.
107 - ip -6 route flush dev sixxs || true
108 - ip link set dev sixxs down || true
109 - ip tunnel del sixxs || true
110 -
111 - # Set up a SixXS tunnel for IPv6 connectivity.
112 - ip tunnel add sixxs mode sit local 131.180.119.77 remote 192.87.102.107 ttl 64
113 - ip link set dev sixxs mtu 1280 up
114 - ip -6 addr add 2001:610:600:88d::2/64 dev sixxs
115 - ip -6 route add default via 2001:610:600:88d::1 dev sixxs
116 -
117 - # Discard all traffic to networks in our prefix that don't exist.
118 - ip -6 route add 2001:610:685::/48 dev lo || true
119 -
120 - # Create a local network (prefix:1::/64).
121 - ip -6 addr add 2001:610:685:1::1/64 dev ${config.system.build.mainPhysicalInterface} || true
122 -
123 - # Forward traffic to our Nova cloud to "stan".
124 - #ip -6 route add 2001:610:685:2::/64 via 2001:610:685:1:222:19ff:fe55:bf2e || true
125 - '';
126 -
127 - dhcpcd.denyInterfaces = [ "sixxs" ];
95 };
96
97 environment.systemPackages = [ pkgs.duplicity ];