3 files changed, 93 insertions, 16 deletions
diff --git a/hosts/common/optional/services/dhcp.nix b/hosts/common/optional/services/dhcp.nix
index 6a9ee72..0c9aa37 100644
--- a/hosts/common/optional/services/dhcp.nix
+++ b/hosts/common/optional/services/dhcp.nix
@@ -1,4 +1,4 @@
-{ config, lib, pkgs, ... }:
+{ pkgs, ... }:
 {
 
   environment = {
@@ -16,8 +16,97 @@
 
   services = {
     kea.dhcp4 = {
-      configFile = config.sops.secrets.kea-dhcp4_conf.path;
       enable = true;
+      settings = {
+        interfaces-config.interfaces = [ "enp116s0" ];
+
+        lease-database = {
+          name = "/var/lib/kea/dhcp4.leases";
+          persist = true;
+          type = "memfile";
+        };
+
+        renew-timer = 900;
+        rebind-timer = 1800;
+        valid-lifetime = 3600;
+
+        option-data = [
+          {
+            name = "domain-name-servers";
+            data = "192.168.1.1";
+            always-send = true;
+          }
+
+          {
+            name = "domain-name";
+            data = "bitgnome.net";
+            always-send = true;
+            }
+
+          {
+            name = "ntp-servers";
+            data = "192.168.1.1";
+            always-send = true;
+          }
+        ];
+
+        client-classes = [
+          {
+            name = "XClient_iPXE";
+            test = "substring(option[77].hex,0,4) == 'iPXE'";
+            boot-file-name = "http://arrakis.bitgnome.net/boot/netboot.ipxe";
+          }
+
+          {
+            name = "UEFI-64-1";
+            test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00007'";
+            next-server = "192.168.1.1";
+            boot-file-name = "/etc/tftp/ipxe.efi";
+          }
+
+          {
+            name = "UEFI-64-2";
+            test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00008'";
+            next-server = "192.168.1.1";
+            boot-file-name = "/etc/tftp/ipxe.efi";
+          }
+
+          {
+            name = "UEFI-64-3";
+            test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00009'";
+            next-server = "192.168.1.1";
+            boot-file-name = "/etc/tftp/ipxe.efi";
+          }
+
+          {
+            name = "Legacy";
+            test = "substring(option[60].hex,0,20) == 'PXEClient:Arch:00000'";
+            next-server = "192.168.1.1";
+            boot-file-name = "/etc/tftp/undionly.kpxe";
+          }
+        ];
+
+        subnet4 = [
+          {
+            subnet = "192.168.1.0/24";
+            pools = [ { pool = "192.168.1.100 - 192.168.1.199"; } ];
+
+            option-data = [
+              {
+                name = "routers";
+                data = "192.168.1.1";
+              }
+            ];
+
+            reservations = [
+              ({ hw-address = "7c:b5:66:65:e2:9e"; ip-address = "192.168.1.17"; }) # ginaz
+              ({ hw-address = "00:05:cd:72:92:b0"; ip-address = "192.168.1.19"; }) # onkyo
+              ({ hw-address = "74:29:af:6f:20:ed"; ip-address = "192.168.1.20"; }) # brother
+              ({ hw-address = "ec:08:6b:6a:4a:ac"; ip-address = "192.168.1.252"; }) # ac2600
+            ];
+          }
+        ];
+      };
     };
 
     xinetd = {
@@ -33,16 +122,6 @@
   };
 
   systemd.services = {
-    kea-dhcp4-server = {
-      restartTriggers = [ config.sops.secrets.kea-dhcp4_conf.sopsFile ];
-      serviceConfig = {
-        ExecStart = lib.mkForce ''
-          ${pkgs.kea}/bin/kea-dhcp4 -c ''${CREDENTIALS_DIRECTORY}/kea-dhcp4_conf
-        '';
-        LoadCredential = [ "kea-dhcp4_conf:${config.sops.secrets.kea-dhcp4_conf.path}" ];
-      };
-    };
-
     tftpd = {
       after = [ "nftables.service" ];
       description = "TFTP server";
diff --git a/hosts/darkstar/default.nix b/hosts/darkstar/default.nix
index 6af2c54..324a2c8 100644
--- a/hosts/darkstar/default.nix
+++ b/hosts/darkstar/default.nix
@@ -98,7 +98,6 @@
     defaultSopsFile = ../secrets/darkstar.yaml;
 
     secrets = {
-      "kea-dhcp4_conf" = {};
       "nftables/forward" = {};
       "nftables/ssh" = {};
       "nix-access-token-github" = {};
diff --git a/hosts/secrets/darkstar.yaml b/hosts/secrets/darkstar.yaml
index cce1f13..37b53ce 100644
--- a/hosts/secrets/darkstar.yaml
+++ b/hosts/secrets/darkstar.yaml
@@ -2,7 +2,6 @@ asterisk:
     extensions.ael: ENC[AES256_GCM,data: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,iv:XJjhLnUgf1cc9O50U4Q8Pis/ZYLg5B9U7u3eDuDcjeA=,tag:0ZqdjgYNMsXcKGIs05PGvA==,type:str]
     pjsip.conf: ENC[AES256_GCM,data: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,iv:n0S64/G7Pm6ZwszDDFMR4qvugU9+HhQDfptOv+KGkzE=,tag:BivicBQ1kjWRj7ZD1c26Pw==,type:str]
     rtp.conf: ENC[AES256_GCM,data:wRhJ3O8qgECEuMX4mCKKv2igiMxTJS6p0IkgilBxPU7sdFsy,iv:UkXcVOwRDlp7s0+u7QbQ6lGyaJq2JO4YaYMzphOA9ew=,tag:iHJXCC9XAnaQc6qsCTNEYQ==,type:str]
-kea-dhcp4_conf: ENC[AES256_GCM,data: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,iv:DY1BlwZZil2BNBRYgC25WHG43aMZrDcL12ba1ZPyi8g=,tag:f4/xWVlsGeXqi01O25zOyA==,type:str]
 nftables:
     forward: ENC[AES256_GCM,data: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,iv:lX4dz+VArj+I9yhy4tahlz8cNvnc/eDs69pKRbIWeEg=,tag:px+HxZRAHlKQA32KJJZwaA==,type:str]
     ssh: ENC[AES256_GCM,data:RA14V9O3PcGOoCfgj4nCILtwc4ER/hPC5HBzz91WhNHmUKzOlxy4zso6HSmSz6sMFBK7J77r3MO+6JKw8eNeHmx9fDDcboHFPcL1PQfYAJE6LNBS0e9d00Mi3k67DdNJZE4F/yOCGIrducvlCsJl/8S4zMMI9Ktum2sJFdkw0INgXoPVPSAQ6nyO5KKcboVtxeKc64RtcBZoO2CCSLhEdVJnE9AXB+l1Pk1926f2XHlS3Ci/Jh/uAwM/4uAeldQ2r3gRuzq9H3SIAgSNZhlJIVr9VDU9kZ28dNpDYhhdOrle1W1drj+9viJ6eeIxykhzZ/8kX34xik4UiMxW9vGO/VpdEdE1XRMqEIRp5L2ADBNCImbXEN5fbRo8+FlL9H+aAFDjBtxxalcSSqApYac6NcM7msF8Lewj4ED8FYXEsEIX7qA8XbVzJuFFYHhRWA6Lt+Gp9Kn6aaxZMF4fl7u35BFPggi1vwsb42la+yQAizk5x0t+fCCX5D8XRHmfCZYX6AYJeQhfzHETuSUu6p4asmhlx+8cJLtjMkkBc8lDscdK7NcuhPm3QzjQt3H7wAHQBzWrxStvBC77K2d3Xf/C6VERUdDvLK1El1oZAl9UmnxAK35kUqAKHHE2xheHQcw1rhy1D0dsX/rQLovTpPdczd/vqpkcJxHk0nH3rddySiyOaWsdoQ3DhpdX7h4PNTwcFJGVzbVR7+9pCnTJ4DTbc9H9G9xiX0vPef4cBuJQPXG8Bc+kMXOpV9uKt9KRoNtPG2M4IZvtaZNiS8qYB0LTjdHiY3C3NYvDc0pkDAIxDjP9TERWxuBCUlscmbXLAxDqB4zO6LBm9yVhMWxYyim5gH24UGD9D2g1piFGXKiSb4dXbrnxoRe/JoLITdWOOEkabVxqJr4KQF07MjTg1JNO3fPLMI6azElQSUj+2ZAy5dqPggg5xw8+h6yp7ZLh3zXaTlSroL+yA4BH8BjVuEa+jl9xqexKgB7zeHb6VhWmtONsffvQtk/kVucDwmXOiOnma1+pj6COoMur2e8bEK3Scap/k+B1b8D9SWMEXi61HxpEtHn6XH5DEdq7Pb12zs2FQEE4QvuaTIscMlvwrsMHkwW7WtkCj2sQFIuUAL4ayyccx+QomhB/hxWKZE83SztNfiAqTWAOaL0XfX3+4qgsehfEkdaUl3FCZvuObPPxIUcYu5Crl54O8B5fbOQE0dcvxMpuxVM6kt3O/jcmj/eri4NPmghBohGSrcJpZ3CUMjWbOJG3A2GFQWztFobkRW9N0K1Fg8UYzKr/lhzlPKiB72D7flghX1yMYfefOnD7vClPUY7oFmnf6sD0qYmZK49SGR6+b7z1bBaskaqhEx3zB214DvOxKGeiPuMVmXk3h7bGqJQ+ejiRcfQHMr1dpFCEMurTmoHwJPwB9fetOpaA0RAEr4pP0QKt8iuTT8MCZi3KBXaiPhZYtdyR5Ka9DETlmBoSeYgyzNht2bCf9nTLn0AJDGZNcZH/NUoy4kLFrhQ18mDIvKHCaALWabp5SnyASQRI/qIkE1DTH8JSkSrr2edz1Ag0SbTMhXsVuHUy3jPuFkNb1SBJxlXmvjHSny7gAr9HVVG2ClRzGtVOXiFHyYguNbmP1F8uqDvabbx8FvAGCEZeARFWQI4iFCe37rYjJE62byilC5LMBCQ5l4/kOYHVgPivPzV8qkZV8B8dQBvMjIvBOgQNvljqagDu0C66rZOTj9G16FDfYDRcdApL0xraAs/O8EgQWxzlB9cQPJmjecAVlF1wsqIbIDODKtTRY4dMYqKfhLoeCV4kPb4WjvoaLxBgbsrJylZKULkO+xbBCvvFhnFNQDOVFPe2ZhEwcx4Ji6j8GZhhyv2LsOdQcXGLgyTr7YM3z/M9DdlCKqlFolA6tod6+9CdUkhFfL7y2vBV3pyEHwyTwWMy5UQIprwm2Ht2RxejhpUcfVydjT/ISJ+aNMy+nq11rrQOlDFsF/E/Db0ngUbORNezWX5n8bqDxModmDLTwYwYT8qu4jruw/WMY1iEZPZzZE8xywRoKCzqN2KweUdEkv+Px6rxtOnNIkPtJxyq4I2L7/oJcaGU40e87KXhhm68qIajboyPM30WInOcGAcG5LwWlyrxwCpthDEcnNlXXghx9izXyqpw7s8hP0qsmRDeESckqn1KUfs98Jkbfg54nEdIT+JcHm0PjvqIHJB61IGWwN4l3SQXY5SKuUb7hSMItKC/FlDKWL5yk5qO55SlYfz0mrD/7Fqk9uFRzP94mswYh8uOkCHBC+WxL4/ashBZOPFZ+WErBAyDgV0LvdiEBN1zpJlAegDozPNXpOzG3rb7QcBr7kwkiHBtD6q7dhBZ51XKPcJPRjkFXDR9Rbj50k6wQHznuDNMA9lI42a6rFN3mr3G8h6mvD67x7b83IxwtLaf7Y0Nb04m/37sCJM1TbjP6jXvD0BdIAdbLc7Qk3K8F2cSIfNH/O7JI9WTvXxxOKtPdpRnnrOURpr4PnXEdJJ1ErujfCPPvFkr0BjpR1Xv2LYKmWISx2OblJnx/MAwECBacN69SX5qnJlaP1Mn769lR5quhAaBCpq0LmHSB1jqF5ap33VKHcB9EHs2ActJHMyn6GxRXSYudw==,iv:iE3MNeQkraGC3qvhP2CtVQv24XVzUQMJZuPa1JxlN9E=,tag:wU1dIUj/HoWD/QPHqHxcDg==,type:str]
@@ -31,8 +30,8 @@ sops:
             ZTdpV09qUVZGK3FjTWRITFp5TGZFUkUK1E9IN+SyTV0r9l1bd+2z7zrsp/7VxCyG
             tEWZp8LmfkGEunspv6iDyxKbYxWqNqJxZuSVeMD4ZMx6YLwHfW797w==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-11-11T08:59:00Z"
-    mac: ENC[AES256_GCM,data:hoP87++k3XiZchScvUPs9OM4hshHHthlWmfPP1asi7czqd5/b9qW+CVCRctWqaU0KrmajiJGgCw0cwsBlmdhOjcss1jYen4uN9aQLem51xdmcNUG3STqqvxNdSdxxn1zNwuA/1EOhNFBPjI1x3KyzmaK6IcTW0Okrqgt4TkqT3s=,iv:4rZYWKL+12a5/Le2x/wBaJviFW+SNhO5ACtTGl0Odks=,tag:RsgZ3v+gKKnxewT6FgtI0Q==,type:str]
+    lastmodified: "2024-11-12T22:11:05Z"
+    mac: ENC[AES256_GCM,data:YgCiqSbW2qMrGM3SYO7F4xcgrdRaBcaLj8r53i9Nu5D75l7fA+qKTc89XCpNXlFMv15LHT3kKjfXqsH2Cyn8RyPvrHHd/Hnqa7paQPrcpQIRcpP8QTMCBNFJvzpaXUozwb3fpx1xY63Ydw/TDv1/PQBEJWzp9k/MDiTSZYOba+Q=,iv:9w88jxstxmvIScgCUtgl1hPkr/j76Rked3Kv9fhZQJ4=,tag:UvfTXI222OFtIqex+0mdhw==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
     version: 3.9.1