no wg while at home

bundles/kea-dhcpd/items.py

@@ -15,6 +15,7 @@ svc_systemd = {
         'needs': [
             'pkg_apt:kea-dhcp4-server',
             'file:/etc/kea/kea-dhcp4.conf',
+            'svc_systemd:systemd-networkd:restart',
         ],
     },
 }

nodes/home.router.py

@@ -14,16 +14,17 @@
     'metadata': {
         'id': '1d6a43e5-858c-42f9-9c40-ab63d61c787c',
         'network': {
-            'internal': {
+            'external': {
-                'interface': 'eno1',
-                'ipv4': '10.0.0.1/24',
-                'vlans': {'iot', 'internet', 'guest'},
-                'dhcp_server': True,
-            },
-            'temp': {
                 'interface': 'enx00e04c220682',
                 'ipv4': '10.0.99.126/24',
                 'gateway4': '10.0.99.1',
+                'vlans': {'iot', 'internet', 'guest', 'rolf', 'internal'},
+            },
+            'internal': {
+                'type': 'vlan',
+                'id': 1,
+                'ipv4': '10.0.0.1/24',
+                'dhcp_server': True,
             },
             'iot': {
                 'type': 'vlan',
@@ -42,6 +43,12 @@
                 'ipv4': '10.0.9.1/24',
                 'dhcp_server': True,
             },
+            'rolf': { # rolf local test
+                'type': 'vlan',
+                'id': 51,
+                'ipv4': '192.168.179.1/24',
+                'dhcp_server': True,
+            },
         },
         # 'nftables': {
         #     'forward': {
@@ -68,7 +75,7 @@
                     'allowed_ips': [
                         '10.0.10.0/24',
                         '10.0.10.0/24',
-                        '192.168.179.0/24',
+                        #'192.168.179.0/24',
                         '10.0.227.0/24', # mseibert.freescout
                     ],
                 },

nodes/wb.offsite-backups.py

@@ -1,5 +1,4 @@
 {
-    'dummy': True,
     'hostname': '192.168.179.20',
     'groups': [
         'debian-11',
@@ -10,7 +9,7 @@
         'backup-freshness-check',
         'dm-crypt',
         'smartctl',
-        'wireguard',
+        #'wireguard',
         'zfs',
     ],
     'metadata': {