From e57a86d5d06000404e85c1a1959d0a10d8809d23 Mon Sep 17 00:00:00 2001
From: Erwin Boskma <erwin@horus.nu>
Date: Tue, 21 Jan 2025 14:55:15 +0100
Subject: [PATCH] mimir: Disable horus1 VPN connection until re-established

---
 machines/mimir/configuration.nix | 7 +++++--
 machines/mimir/secrets.yaml      | 7 ++++---
 2 files changed, 9 insertions(+), 5 deletions(-)

diff --git a/machines/mimir/configuration.nix b/machines/mimir/configuration.nix
index c80d765..7b05a70 100644
--- a/machines/mimir/configuration.nix
+++ b/machines/mimir/configuration.nix
@@ -280,7 +280,8 @@
       enable = true;
 
       # wait-online.extraArgs = [ "--interface=enp4s0" ];
-      wait-online.anyInterface = true;
+      # wait-online.anyInterface = true;
+      wait-online.enable = false;
 
       links = {
         "40-enp4s0" = {
@@ -295,6 +296,7 @@
 
       netdevs = {
         "11-horus1" = {
+          enable = false;
           netdevConfig = {
             Kind = "wireguard";
             MTUBytes = "1420";
@@ -325,7 +327,6 @@
 
           domains = [
             "internal.horus.nu"
-            "bedum.horus.nu"
           ];
 
           dhcpV4Config = {
@@ -354,7 +355,9 @@
           #   { Address = "192.168.42.10/24"; }
           # ];
         };
+
         "41-horus1" = {
+          enable = false;
           matchConfig = {
             Name = "horus1";
           };
diff --git a/machines/mimir/secrets.yaml b/machines/mimir/secrets.yaml
index 3652455..4c7679a 100644
--- a/machines/mimir/secrets.yaml
+++ b/machines/mimir/secrets.yaml
@@ -1,3 +1,4 @@
+wireguard-horus0-privkey: ENC[AES256_GCM,data:20S+TcrBm8McWiLJfWMhNwJoawi6m+f/Gj0ublR+OAZ7x5mMUXKqwSUOPoo=,iv:b+Q2HvtIKkGXxuRwwKk84R9ho4QDoy/9hL20lOAOTlg=,tag:jGztgIjdZRtbP2lOgEHMdw==,type:str]
 wireguard-horus1-privkey: ENC[AES256_GCM,data:swCZ55Y2OtW0r/A4u02okf4VONc24laR20bSgdK8Buw36uRfCiN/ydykaDw=,iv:TLMbiLRLdT3af6bsc9y0G+s5O1GsOoerug1IPUFhar0=,tag:HBug4T1Mi5XX282wkDYoFQ==,type:str]
 sops:
     kms: []
@@ -32,8 +33,8 @@ sops:
             bjdnSFNFcVZlUzJFOW92WU10UmNCQnMK95u50DI+BzfkWCo/eYpiBUMsdks5mrdz
             AkpVjViYKRYY0QUQpY7o3hD0q7K/IMiEirfn6l80L3m4iHZ/iENupg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2024-12-09T09:52:43Z"
-    mac: ENC[AES256_GCM,data:my4OPZxaQG9E8boVsGzPmMU/d95qUFkuhktS9QxBgN6AC7WNU13GImYpuZRkgcLJzTXYUir+Zw/og5NiIZzW7m4h9AuYxIt3H7NM060oj7zHKcoayetiRGXkPBlVY+DEdo8MtROGhZRhLRt/N3er+IrZvef46aamm320oz6l6ow=,iv:Au7N696wIzbGS8J1jDIEeiR3xFcg9VmX4qqlagRV9bc=,tag:XVsmRSDDKL4YXg82mRY/rw==,type:str]
+    lastmodified: "2025-01-16T12:29:18Z"
+    mac: ENC[AES256_GCM,data:Jp3A423mp/r8PT7GyjAS2i9Uq09h/35bwqnM8+ICs23L2nIZEQgabgb0wmj3p4MaeUesFD0iUfu3XltJ403aeKRmzV2PWdDwKwgmQfoaxzIV2Y2L/nFQwkAWX5u/Eu4SdSzT9KrAZxuzVhrJG5c5OJ7wSW2Lr5eEeoPf4dMyQ80=,iv:f4reogPJ936iwMd/rHYL8Yqqh6qio/biHtAvaoJtqcY=,tag:NNpPyRWXjSdjOHtnMCuEAA==,type:str]
     pgp: []
     unencrypted_suffix: _unencrypted
-    version: 3.9.1
+    version: 3.9.2