stellio: NAT LAN/Wi-Fi out the staging uplink; cross-safe Blocky check

cnx-network 4146f2c -> 596ac1f: allowWan VLANs are now forwarded and masqueraded through stagingPort (lan5) while ppp0 is down, and pppd gets `defaultroute-metric 0` so the PPPoE route is installed next to the staging DHCP route instead of being refused. Also makes CrowdSec opt-in upstream (stellio leaves it off). The nixpkgs Blocky config check runs the aarch64 binary, which an x86_64 builder without binfmt cannot execute (`--max-jobs 0`); validate the same YAML with the build host's blocky until the router service carries this.
2026-09-21 08:11:19 +00:00
parent 6d131cc727
commit a48a4300eb
2 changed files with 26 additions and 5 deletions
@@ -181,11 +181,11 @@
        ]
      },
      "locked": {
-        "lastModified": 1789726083,
-        "narHash": "sha256-oxlp99L8KXYDdzroS+QeqhQyFigVHp44D6aVFsifpe0=",
+        "lastModified": 1789975217,
+        "narHash": "sha256-n7L5vHbyemIa5jzlueIdpWmQsQSkv5Rrf9JV5kTZ6uU=",
        "ref": "clanService-router-ai",
-        "rev": "4146f2c878b104d96d25575be553378ae276f6e0",
-        "revCount": 198,
+        "rev": "596ac1f4bb851af3e03c06ba286cb33ae36095d2",
+        "revCount": 201,
        "type": "git",
        "url": "https://git.b4l.co.th/B4L/cnx-network-clan"
      },