WIP: router: firewall: proper filtering for hosts proxied by cloudflare

hosts/router/dns.nix

@@ -63,9 +63,9 @@ in
     user_rules = [
       # DNS rewrites
       "|grouter.${domain}^$dnsrewrite=${ifs.lan.ulaAddr}"
-      "|pve-1.${sysdomain}^$dnsrewrite=${ifs.lan.p4}.5"
+      "|pve-1.${sysdomain}^$dnsrewrite=${vars.hosts.lan.pve-1.addr4}"
-      "|pve-1.${sysdomain}^$dnsrewrite=${ifs.lan.ulaPrefix}::5:1"
       "|pve-3.${sysdomain}^$dnsrewrite=${ifs.lan.p4}.7"
+      "|pve-1.${sysdomain}^$dnsrewrite=${vars.hosts.lan.pve-1.ulaAddr}"
       "|pve-3.${sysdomain}^$dnsrewrite=${ifs.lan.ulaPrefix}::7:1"
       "|truenas.${sysdomain}^$dnsrewrite=${ifs.lan.p4}.10"
       "|truenas.${sysdomain}^$dnsrewrite=${ifs.lan.ulaPrefix}::20d0:43ff:fec6:3192"

hosts/router/vars.nix

@@ -95,4 +95,13 @@ rec {
       ulaPrefix_ = "${ulaPrefix}:0050";  # ::/64
     };
   };
+
+  hosts = {
+    lan = {
+      pve-1 = {
+        addr4 = "${ifs.lan.p4}.5";
+        ulaAddr = "${ifs.lan.ulaPrefix}::5:1";
+      };
+    };
+  };
 }