2 ms·
I used https://gist.github.com/tomfitzhenry/35389b0907d9c9172e5d790ca9e0d0dc https://gist.github.com/tomfitzhenry/35389b0907d9c9172e5d790... to install it (diff
by bananadrama 6y ago
I used https://gist.github.com/tomfitzhenry/35389b0907d9c9172e5d790ca9e0d0dc https://gist.github.com/tomfitzhenry/35389b0907d9c9172e5d790... to install it (different model but it worked for me).
The router uses systemd-networkd, unbound, corerad, hostapd.
I'm not in a position to share my config yet. If you give me contact details, I can share a few bits.
Downsides:
* When you screw up, you can lose Internet connectivity.
* When you screw up, you can lose access to your router. I mitigate this by securing exposing the router on the Internet, and then using 4G to SSH to the router.
* It took a while for me to figure out how to get a decent IPv6 setup.
* NixOS specific: if you find some config on StackOverflow (eg) it takes a bit of time to figure out how to fit that into NixOS.
The result is great though:
* this router has been through 2-3 major upgrades, and it just works.
* NixOS is modern/popular enough that it has had wireguard/corerad packaged for a while.
* I have confidence my router is actually behaving according to its config, because NixOS does a great job of that. This allows me to easily rebuild, which is useful if I experiment with something but give up: revert code, then deploy and the router is back to its previous state.