hosts.nix

let
  enable = true;
in
{
  extraConfigs = {
    "cluster-master-1" = {
      midugh.gateway.extraNatConfig.prerouting = ''
        iifname "eth0" tcp dport 80 dnat ip to 192.168.1.146:30080;
        iifname "eth0" tcp dport 443 dnat ip to 192.168.1.146:30443;
        iifname "wg0" tcp dport 80 dnat ip to 192.168.1.146:31080;
        iifname "wg0" tcp dport 443 dnat ip to 192.168.1.146:31443;
      '';
      midugh.gateway.extraNatConfig.postrouting = ''
        oifname "eth0" snat ip to 192.168.1.145;
      '';
      networking.firewall.allowedTCPPorts = [ 80 443 ];
    };
    "cluster-master-2" = {
      networking.firewall.allowedTCPPorts = [ 9100 30080 30443 31080 31443 ];
    };
    "cluster-master-3" = {
      networking.firewall.allowedTCPPorts = [ 9100 ];
    };
    "cluster-master-4" = {
      networking.firewall.allowedTCPPorts = [ 9100 ];
    };
  };
  deploymentConfig = {
    "cluster-master-1" = {
      address = "10.200.0.1";
    };
    "cluster-master-2" = {
      address = "10.200.0.2";
    };
    "cluster-master-3" = {
      address = "10.200.0.3";
    };
    "cluster-master-4" = {
      address = "10.200.0.4";
    };
  };
  apiserver = {
    address = "192.168.1.145";
    extraSANs = [
      "10.200.0.1"
    ];
    port = 6443;
    serviceClusterIpRange = "10.32.0.0/24";
  };
  nodes = [
    {
      name = "cluster-master-1";
      address = "192.168.1.145";
      etcd = {
        enable = enable;
        openFirewall = true;
        tls = true;
      };
      worker = false;
      master = enable;
    }
    {
      name = "cluster-master-2";
      address = "192.168.1.146";
      etcd = {
        enable = enable;
        openFirewall = true;
        tls = true;
      };
      worker = enable;
      master = enable;
    }
    {
      name = "cluster-master-3";
      address = "192.168.1.147";
      etcd = {
        enable = enable;
        openFirewall = true;
        tls = true;
      };
      worker = enable;
      master = enable;
    }
    {
      name = "cluster-master-4";
      address = "192.168.1.148";
      etcd.enable = false;
      worker = enable;
      master = false;
    }
  ];
}