wg-migration #53

Merged

sarahlament merged 12 commits from wg-migration into main 2026-06-27 23:59:51 -05:00

Conversation 1 Commits 12 Files changed 19 +151 -177

sarahlament commented 2026-06-26 22:51:25 -05:00

Owner

Copy link

• removed headscale in favor of a fully self-defined wireguard internal network
  • minor changes to the directory, the idea is for my hosts to become fully declared from there
• systemd-networkd is now the default network manager, with DHCP on default
• split horizon DNS keeps my private records under the local internal network
  • TODO: have private services bind their caddy vhost to their internal IP

- removed `headscale` in favor of a fully self-defined `wireguard` internal network - minor changes to the `directory`, the idea is for my hosts to become fully declared from there - `systemd-networkd` is now the default network manager, with DHCP on default - split horizon DNS keeps my private records under the local `internal` network - TODO: have private services `bind` their caddy vhost to their internal IP

sarahlament added the

fleet

module

labels 2026-06-26 22:51:25 -05:00

sarahlament added 6 commits 2026-06-26 22:51:25 -05:00

opened resolver to tailnet 8d77eb3066

minor fixes 7981659d21

mismatched login server 1061716d84

new ULA, and tightened kresd listeners ede62ed4d2

begun migration to wireguard ... 7ed3454539

- `kresd` now answers my internal zone and services via hints
- `headscale` and login tailscale client removed
- removed private services from `static/lament.gay/zone`
- new addressing model in `lib/directory`
  - hosts live under `.hosts`, with `services` as a sibling
    - `services` maps CNAMES to public services (TODO: declarative ZONE file)
      - `private.${hostName}` map private services for `kresd`
- new ULA created for `wireguard`

- oh, and cleaned up the stale `mkSecret` in `static/athena/mailserver`

wireguard configuration completed c38564599d

sarahlament added 3 commits 2026-06-27 00:12:51 -05:00

mkForce resolved off c07cf80427

useNetworkd broke things? bee9ef377d

switched to networking.wireguard over systemd.network 24f7bc980d

sarahlament added 1 commit 2026-06-27 22:09:55 -05:00

disabled DHCPCD trying to set nameservers f98adb9b71

sarahlament added 1 commit 2026-06-27 23:46:28 -05:00

added search to networking for unqualified names fddb748e51

sarahlament added 1 commit 2026-06-27 23:57:01 -05:00

forgot to update the CI 0b4c20910e

sarahlament commented 2026-06-27 23:59:34 -05:00

Author

Owner

Copy link

commit has passed a manual nh os test on both sides, and the entire pipeline verified through the new internal network

commit has passed a manual `nh os test` on both sides, and the entire pipeline verified *through* the new `internal` network

sarahlament merged commit 7f5f3d40b0 into main 2026-06-27 23:59:51 -05:00

sarahlament deleted branch wg-migration 2026-06-27 23:59:51 -05:00

sarahlament referenced this pull request from a commit 2026-06-27 23:59:53 -05:00

wg-migration (#53)

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

dropped

This is a dropped feature

  

feature

This is a new feature

  

fix

This fixes a problem

  

fleet

This is a fleet issue

  

lock

This is an update to the lock file

  

module

This is a new module

No labels

dropped

feature

fix

fleet

lock

module

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference

sarahlament/nix-configurations!53

No description provided.