From 162707546cc263c143042c7db6cc8444a9a46934 Mon Sep 17 00:00:00 2001
From: kurogeek <kurogeek@lmvhaus.com>
Date: Fri, 7 Nov 2025 15:04:26 +0700
Subject: [PATCH] whitehouse router: add vlan on wan interface

---
 routers/white-house/configuration.nix | 25 +++++++++++++++++--------
 1 file changed, 17 insertions(+), 8 deletions(-)

diff --git a/routers/white-house/configuration.nix b/routers/white-house/configuration.nix
index 40a7b1d..2525bbc 100644
--- a/routers/white-house/configuration.nix
+++ b/routers/white-house/configuration.nix
@@ -76,15 +76,24 @@ in
         localDomain = "lan";
       };
     };
-    wan = {
-      interface = svc.pppoe.build {
-        interface = config.hardware.networkInterfaces.wan;
-        username = secrets.l2tp.name;
-        password = secrets.l2tp.password;
-      };
+    wan =
+      let
+        inherit (config.system.service) vlan;
+        wan-vlan = vlan.build {
+          ifname = "wan-vlan";
+          primary = config.hardware.networkInterfaces.wan;
+          vid = "10";
+        };
+      in
+      {
+        interface = svc.pppoe.build {
+          interface = wan-vlan;
+          username = secrets.l2tp.name;
+          password = secrets.l2tp.password;
+        };
 
-      dhcp6.enable = true;
-    };
+        dhcp6.enable = true;
+      };
     firewall = {
       enable = true;
       rules = secrets.firewallRules;