devices.srv1.node1: enable vasp

devices/srv1/node0/default.nix

@@ -17,7 +17,11 @@ inputs:
       };
       services =
       {
-        xray.client.enable = true;
+        xray.client =
+        {
+          enable = true;
+          dnsmasq.extraInterfaces = [ "eno146" ];
+        };
         beesd.instances.root = { device = "/"; hashTableSizeMB = 512; threads = 4; };
         wireguard =
         {
@@ -51,5 +55,8 @@ inputs:
         options = [ "rbind" ];
       };
     };
+    # without this, tproxy does not work
+    # TODO: why?
+    networking.firewall.trustedInterfaces = [ "eno146" ];
   };
 }

devices/srv1/node1/default.nix

@@ -10,22 +10,18 @@ inputs:
         networking.networkd.static =
         {
           eno1 = { ip = "192.168.1.11"; mask = 24; gateway = "192.168.1.1"; };
-          eno2 = { ip = "192.168.178.2"; mask = 24; gateway = "192.168.178.1"; };
+          eno2 = { ip = "192.168.178.2"; mask = 24; gateway = "192.168.178.1"; dns = "192.168.178.1"; };
         };
         cluster.nodeType = "worker";
         initrd.sshd.enable = true;
       };
       services.beesd.instances.root = { device = "/"; hashTableSizeMB = 256; threads = 4; };
-      packages =
-      {
-        vasp = null;
-        packages._packages = [(inputs.pkgs.runCommand "master-system" {}
-        ''
-          mkdir -p $out/share
-          ln -s ${inputs.topInputs.self.nixosConfigurations.srv1-node0.config.system.build.toplevel} \
-            $out/share/master-system
-        '')];
-      };
+      packages.packages._packages = [(inputs.pkgs.runCommand "master-system" {}
+      ''
+        mkdir -p $out/share
+        ln -s ${inputs.topInputs.self.nixosConfigurations.srv1-node0.config.system.build.toplevel} \
+          $out/share/master-system
+      '')];
     };
     specialisation =
     {