1.0.0 Release IaaS

2026-03-15 04:41:02 +09:00
commit a7365da431
292 changed files with 36059 additions and 0 deletions
--- a/config/node/fw/networkd/00-fw-wan.link
+++ b/config/node/fw/networkd/00-fw-wan.link
@@ -0,0 +1,5 @@
+[Match]
+MACAddress={{ hostvars['fw']['vm']['wan_mac'] }}
+
+[Link]
+Name=wan
--- a/config/node/fw/networkd/01-fw-client.link
+++ b/config/node/fw/networkd/01-fw-client.link
@@ -0,0 +1,5 @@
+[Match]
+MACAddress={{ hostvars['fw']['vm']['lan_mac'] }}
+
+[Link]
+Name=client
--- a/config/node/fw/networkd/10-fw-server.netdev
+++ b/config/node/fw/networkd/10-fw-server.netdev
@@ -0,0 +1,6 @@
+[NetDev]
+Name=server
+Kind=vlan
+
+[VLAN]
+Id=10
--- a/config/node/fw/networkd/11-fw-user.netdev
+++ b/config/node/fw/networkd/11-fw-user.netdev
@@ -0,0 +1,6 @@
+[NetDev]
+Name=user
+Kind=vlan
+
+[VLAN]
+Id=20
--- a/config/node/fw/networkd/20-fw-wan.network
+++ b/config/node/fw/networkd/20-fw-wan.network
@@ -0,0 +1,16 @@
+[Match]
+Name=wan
+
+[Network]
+DHCP=true
+IPv6AcceptRA=true
+IPForward=true
+RequiredForOnline=false
+
+[DHCPv4]
+UseDNS=false
+
+[DHCPv6]
+WithoutRA=solicit
+PrefixDelegationHint=yes
+UseDNS=false
--- a/config/node/fw/networkd/21-fw-client.network
+++ b/config/node/fw/networkd/21-fw-client.network
@@ -0,0 +1,16 @@
+[Match]
+Name=client
+
+[Network]
+# General
+IPForward=true
+IPv6SendRA=false
+IPv6AcceptRA=false
+VLAN=server
+VLAN=user
+# IPv4
+Address={{ hostvars['fw']['network4']['firewall']['client'] }}/24
+DNS={{ hostvars['fw']['network4']['blocky']['server'] }}
+# IPv6
+Address={{ hostvars['fw']['network6']['firewall']['client'] }}/64
+DNS={{ hostvars['fw']['network6']['blocky']['server'] }}
--- a/config/node/fw/networkd/22-fw-server.network
+++ b/config/node/fw/networkd/22-fw-server.network
@@ -0,0 +1,24 @@
+[Match]
+Name=server
+
+[Network]
+IPForward=true
+IPv6SendRA=false
+IPv6AcceptRA=false
+# IPv4
+Address={{ hostvars['fw']['network4']['firewall']['server'] }}/24
+DNS={{ hostvars['fw']['network4']['blocky']['server'] }}
+# IPv6
+Address={{ hostvars['fw']['network6']['firewall']['server'] }}/64
+DNS={{ hostvars['fw']['network6']['blocky']['server'] }}
+
+[Address]
+Address={{ hostvars['fw']['network4']['blocky']['server'] }}/24
+[Address]
+Address={{ hostvars['fw']['network4']['bind']['server'] }}/24
+[Address]
+Address={{ hostvars['fw']['network6']['blocky']['server'] }}/64
+PreferredLifetime=0
+[Address]
+Address={{ hostvars['fw']['network6']['bind']['server'] }}/64
+PreferredLifetime=0
--- a/config/node/fw/networkd/23-fw-user.network
+++ b/config/node/fw/networkd/23-fw-user.network
@@ -0,0 +1,25 @@
+[Match]
+Name=user
+
+[Network]
+IPForward=true
+IPv6PrefixDelegation=true
+IPv6SendRA=true
+IPv6SendRAExtension=false
+# IPv4
+Address={{ hostvars['fw']['network4']['firewall']['user'] }}/24
+DNS={{ hostvars['fw']['network4']['blocky']['server'] }}
+
+[IPv6PrefixDelegation]
+SubnetId=20
+# A-Flag: Enable SLAAC
+AddressAutoconfiguration=true
+OnLink=true
+
+[IPv6SendRA]
+# M-Flag: Client IP from DHCPv6
+Managed=false
+# O-Flag: Other information form DHCPv6
+OtherInformation=false
+EmitDNS=true
+DNS={{ hostvars['fw']['network6']['blocky']['server'] }}