122 lines
3.2 KiB
Nix
122 lines
3.2 KiB
Nix
{ lib } :
|
|
|
|
with lib;
|
|
{
|
|
options = {
|
|
|
|
interface = mkOption {
|
|
type = types.str;
|
|
description = ''
|
|
Interface for inside_network, bound by vrrp.
|
|
'';
|
|
};
|
|
|
|
state = mkOption {
|
|
type = types.enum [ "MASTER" "BACKUP" ];
|
|
default = "BACKUP";
|
|
description = ''
|
|
Initial state. As soon as the other machine(s) come up, an election will
|
|
be held and the machine with the highest "priority" will become MASTER.
|
|
So the entry here doesn't matter a whole lot.
|
|
'';
|
|
};
|
|
|
|
virtualRouterId = mkOption {
|
|
type = types.int;
|
|
description = ''
|
|
Arbitrary unique number 0..255. Used to differentiate multiple instances
|
|
of vrrpd running on the same NIC (and hence same socket).
|
|
'';
|
|
};
|
|
|
|
priority = mkOption {
|
|
type = types.int;
|
|
default = 100;
|
|
description = ''
|
|
For electing MASTER, highest priority wins. To be MASTER, make 50 more
|
|
than other machines.
|
|
'';
|
|
};
|
|
|
|
noPreempt = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
VRRP will normally preempt a lower priority machine when a higher
|
|
priority machine comes online. "nopreempt" allows the lower priority
|
|
machine to maintain the master role, even when a higher priority machine
|
|
comes back online. NOTE: For this to work, the initial state of this
|
|
entry must be BACKUP.
|
|
'';
|
|
};
|
|
|
|
useVmac = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
Use VRRP Virtual MAC.
|
|
'';
|
|
};
|
|
|
|
vmacInterface = mkOption {
|
|
type = types.nullOr types.str;
|
|
default = null;
|
|
description = ''
|
|
Name of the vmac interface to use. keepalived will come up with a name
|
|
if you don't specify one.
|
|
'';
|
|
};
|
|
|
|
vmacXmitBase = mkOption {
|
|
type = types.bool;
|
|
default = false;
|
|
description = ''
|
|
Send/Recv VRRP messages from base interface instead of VMAC interface.
|
|
'';
|
|
};
|
|
|
|
unicastSrcIp = mkOption {
|
|
type = types.nullOr types.str;
|
|
default = null;
|
|
description = ''
|
|
Default IP for binding vrrpd is the primary IP on interface. If you
|
|
want to hide location of vrrpd, use this IP as src_addr for unicast
|
|
vrrp packets.
|
|
'';
|
|
};
|
|
|
|
unicastPeers = mkOption {
|
|
type = types.listOf types.str;
|
|
default = [];
|
|
description = ''
|
|
Do not send VRRP adverts over VRRP multicast group. Instead it sends
|
|
adverts to the following list of ip addresses using unicast design
|
|
fashion. It can be cool to use VRRP FSM and features in a networking
|
|
environment where multicast is not supported! IP Addresses specified can
|
|
IPv4 as well as IPv6.
|
|
'';
|
|
};
|
|
|
|
virtualIps = mkOption {
|
|
type = types.listOf (types.submodule (import ./virtual-ip-options.nix {
|
|
inherit lib;
|
|
}));
|
|
default = [];
|
|
example = literalExample ''
|
|
TODO: Example
|
|
'';
|
|
description = "Declarative vhost config";
|
|
};
|
|
|
|
extraConfig = mkOption {
|
|
type = types.lines;
|
|
default = "";
|
|
description = ''
|
|
Extra lines to be added verbatim to the vrrp_instance section.
|
|
'';
|
|
};
|
|
|
|
};
|
|
|
|
}
|