cnx-network 4146f2c -> 596ac1f: allowWan VLANs are now forwarded and
masqueraded through stagingPort (lan5) while ppp0 is down, and pppd gets
`defaultroute-metric 0` so the PPPoE route is installed next to the
staging DHCP route instead of being refused. Also makes CrowdSec opt-in
upstream (stellio leaves it off).
The nixpkgs Blocky config check runs the aarch64 binary, which an x86_64
builder without binfmt cannot execute (`--max-jobs 0`); validate the same
YAML with the build host's blocky until the router service carries this.
f98226b -> 4146f2c. kea-dhcp4-server started before networkd had
addressed vlan-lan/vlan-mgmt on stellio and ran with no socket on :67;
Kea now requires every configured socket and retries the bind while
networkd catches up.
60aac6e -> f98226b. Wireless BSS .network files now match on
WLANInterfaceType=ap so networkd enslaves the radios to br0 only once
hostapd has switched them to AP mode; on stellio (mt798x-wmac) the
earlier one-shot enslave failed in station mode and wifi clients never
reached Kea. Also picks up the assertion that no supplicant owns the
radios.
One dual-band SSID "WhiteHouse" on lan (replaces the liminix router's
WhiteHouse/WhiteHouse-5), WPA3 transition, WiFi 6, old channels 2/36,
country TH. Band mapping wlan0=2g/wlan1=5g assumed from mt7986 phy
order; verify with `iw phy`.
Package git.b4l.co.th/newedge/default_thai_company as a frappix app
(pkgs/frappix/default-thai-company.nix) and expose it through a new
frappixAppsOverlay that extends the pkgs.frappix scope. Install it on
the poyerp.newedge.house site on deneb.
Set connection.autoconnect-retries=0 and connection.auth-retries=0 on the
NetworkManager profiles generated by the clan wifi module for buna, so a
flaky AP or slow auth never leaves the connection permanently blocked.
WordPress writes into wp-content/upgrade-temp-backup (core rollback on
theme/plugin updates) and wp-content/ai1wm-backups (All-in-One WP
Migration). Both sit directly under wp-content, which is the read-only
Nix store path, so creation fails.
Symlink both dirs out to the writable state dir and add matching
tmpfiles rules, same pattern as themes/plugins/upgrade.
Fixes "Could not create the upgrade-temp-backup directory" on Bricks
theme update, and the ai1wm-backups permission errors.