feat(home.router): emergency uplink via carina VLAN instead of pppoe

VLAN 52 "carina" on sfp-sfpplus7 of the rack switch, routed and
masqueraded by home.router via 192.168.178.1; pppoe and the rolf test
VLAN are commented out for now.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01RywMtsL8qXG7GDY3MHq9Uh

groups/os/routeros.py

@@ -28,6 +28,7 @@
                 'wokeonlan': '5',
                 'gast': '9',
                 'rolf': '51',
+                'carina': '52',
             },
             'vlan_groups': {
                 'home': {
@@ -43,6 +44,7 @@
                         'gast',
                         'rolf',
                         'wokeonlan',
+                        'carina',
                     },
                 },
                 'internet': {
@@ -53,6 +55,10 @@
                     'untagged': 'wokeonlan',
                     'tagged': set(),
                 },
+                'carina': {
+                    'untagged': 'carina',
+                    'tagged': set(),
+                },
             },
             'vlan_ports': {},
         },

nodes/home.router.py

@@ -11,7 +11,7 @@
     'bundles': [
         'kea-dhcpd',
         'wireguard',
-        'pppoe',
+        #'pppoe',
         'wol-waker',
     ],
     'metadata': {
@@ -57,12 +57,29 @@
                 'ipv4': '10.0.9.1/24',
                 'dhcp_server': True,
             },
-            'rolf': { # rolf local test
+            # 'rolf': { # rolf local test
+            #     'type': 'vlan',
+            #     'vlan_interface': 'internal',
+            #     'id': 51,
+            #     'ipv4': '192.168.179.1/24',
+            #     'dhcp_server': True,
+            # },
+            'carina': { # NOTFALL
                 'type': 'vlan',
                 'vlan_interface': 'internal',
-                'id': 51,
-                'ipv4': '192.168.179.1/24',
-                'dhcp_server': True,
+                'id': 52,
+                'ipv4':     '192.168.178.199/24',
+                'gateway4': '192.168.178.1',
+            },
+            # 'carina': {
+            #     'interface': 'enp1s0f1',
+            #     'ipv4':     '192.168.178.199/24',
+            #     'gateway4': '192.168.178.1',
+            # },
+        },
+        'nftables': {
+            'nat': {
+                'oifname carina masquerade',
             },
         },
         'bind': {

nodes/home.switch-rack-10g.py

@@ -37,7 +37,8 @@
                     'vlan_group': 'home',
                 },
                 'sfp-sfpplus7': {
-                    'vlan_group': 'home',
+                    'vlan_group': 'carina',
+                    'comment': 'CARINA',
                 },
                 'sfp-sfpplus8': {
                     'vlan_group': 'infra',