feat(router): add supervisor to all the networks

Author: ajgon

nix/machines/router/modules/bind.nix

@@ -269,6 +269,7 @@ in
 
         router               IN  A   10.42.1.1
         supervisor           IN  A   10.42.1.2
+        dexter               IN  A   10.42.1.10
       '';
     };
 

nix/machines/router/modules/kea.nix

@@ -107,7 +107,7 @@
               }
               {
                 name = "domain-name-servers";
-                data = "10.42.1.1";
+                data = "10.42.1.2";
               }
             ];
           }
@@ -121,16 +121,16 @@
               }
             ];
             reservations = [
+              {
+                # supervisor
+                "hw-address" = "00:00:0a:64:01:02";
+                "ip-address" = "10.100.1.2";
+              }
               {
                 # mandark / NAS / 10gbe
                 "hw-address" = "e4:1d:53:37:56:41";
                 "ip-address" = "10.100.10.1";
               }
-              {
-                # mandark / NAS
-                "hw-address" = "90:09:d0:1f:68:35";
-                "ip-address" = "10.100.10.2";
-              }
             ];
             "option-data" = [
               {
@@ -139,7 +139,7 @@
               }
               {
                 name = "domain-name-servers";
-                data = "10.100.1.1";
+                data = "10.100.1.2";
               }
             ];
           }
@@ -152,14 +152,21 @@
                 pool = "10.200.100.100 - 10.200.100.200";
               }
             ];
+            reservations = [
+              {
+                # supervisor
+                "hw-address" = "00:00:0a:c8:01:02";
+                "ip-address" = "10.200.1.2";
+              }
+            ];
             "option-data" = [
               {
                 name = "routers";
                 data = "10.200.1.1";
               }
               {
                 name = "domain-name-servers";
-                data = "10.200.1.1";
+                data = "10.200.1.2";
               }
             ];
           }

nix/machines/supervisor/modules/arion-adguard-home.nix

@@ -5,6 +5,9 @@
       service = {
         restart = "always";
         container_name = "adguard-home";
+        # by default DNS is set to adguard in docker which causes internal loopback and resolving problems
+        # that's why we need to force it to actual gateway
+        dns = [ "10.42.1.1" ];
         image = "ghcr.io/deedee-ops/adguardhome:v0.107.51";
         ports = [
           "53:53/tcp"

nix/machines/supervisor/modules/arion-nginx-proxy-manager.nix

@@ -5,6 +5,9 @@
       service = {
         restart = "always";
         container_name = "nginx-proxy-manager";
+        # by default DNS is set to adguard in docker which causes internal loopback and resolving problems
+        # that's why we need to force it to actual gateway
+        dns = [ "10.42.1.1" ];
         image = "ghcr.io/deedee-ops/nginx-proxy-manager:2.11.2";
         ports = [
           "80:80"

nix/machines/supervisor/modules/arion-omada-controller.nix

@@ -5,6 +5,9 @@
       service = {
         restart = "always";
         container_name = "omada-controller";
+        # by default DNS is set to adguard in docker which causes internal loopback and resolving problems
+        # that's why we need to force it to actual gateway
+        dns = [ "10.42.1.1" ];
         image = "ghcr.io/deedee-ops/omada-controller:5.13-chromium@sha256:6686bfa642800b4ba32afc50d9b5ca9453cc5b5046fb1082ffc64a982a8256c1";
         networks = {
           # uncomment when bootstrapping omada switch from scratch

nix/machines/supervisor/networking.nix

@@ -4,6 +4,9 @@
     hostName = "supervisor";
     networkmanager.enable = true;
     enableIPv6 = false;
+
+    # nixos firewall adds unnecessary mess
+    firewall.enable = false;
   };
 }