# network interface settings; autogenerated
# Please do NOT modify this file directly, unless you know what
# you're doing.
#
# If you want to manage parts of the network configuration manually,
# please utilize the 'source' or 'source-directory' directives to do
# so.
# PVE will preserve these directives, but will NOT read its network
# configuration from sourced files, so do not attempt to move any of
# the PVE managed interfaces into external files!

auto lo
iface lo inet loopback

auto eno1
iface eno1 inet manual

auto eno2
iface eno2 inet manual

iface eno3 inet manual

iface eno4 inet manual

auto bond0
iface bond0 inet manual
	bond-slaves eno1 eno2
	bond-miimon 100
	bond-mode 802.3ad
	bond-xmit-hash-policy layer2+3

auto vmbr0
iface vmbr0 inet static
	address 85.209.118.134/28
	gateway 85.209.118.129
	bridge-ports bond0
	bridge-stp off
	bridge-fd 0
#Main bridge for public VMs

iface vmbr0 inet6 static
	address 2a09:94c4:55d1:7680::86/64
	gateway 2a09:94c4:55d1:7680::1

auto vmbr1
iface vmbr1 inet manual
	address 10.2.1.1/24
	bridge-ports none
	bridge-stp off
	bridge-fd 0
#Internal bridge for VMs

auto vmbr2
iface vmbr2 inet static
	address 192.168.1.1/24
	bridge-ports none
	bridge-stp off
	bridge-fd 0
#NAT bridge for VMs that need masquerading

	post-up   echo 1 > /proc/sys/net/ipv4/ip_forward
	post-up   iptables -t nat -A POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE
	post-up   iptables -t nat -A PREROUTING -i vmbr0 -p tcp --dport 19022 -j DNAT --to 192.168.1.144:19022
	post-down iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o vmbr0 -j MASQUERADE
	post-down iptables -t nat -D PREROUTING -i vmbr0 -p tcp --dport 19022 -j DNAT --to 192.168.1.144:19022

source /etc/network/interfaces.d/*