3 files changed, 14 insertions, 3 deletions
diff --git a/machines/taupe/default.nix b/machines/taupe/default.nix
index caa5a83..51d84b4 100644
--- a/machines/taupe/default.nix
+++ b/machines/taupe/default.nix
@@ -3,7 +3,10 @@
 {
   imports = [
     ../../modules/common.nix
-    ../../modules/vpn/egress.nix
+
+    # taupe is an egress node in the renard tunnel.
+    # it routes traffic towards helsinki, finland.
+    ../../modules/tunnel/egress.nix
 
     ./hardware.nix
     ./devices.nix
@@ -11,6 +14,7 @@
 
   foundation = {
     www = {
+      # a tunnel egress node requires the http/https ports.
       enable = false;
 
       public = false;
diff --git a/machines/taureau/default.nix b/machines/taureau/default.nix
index dd828af..d9d5636 100644
--- a/machines/taureau/default.nix
+++ b/machines/taureau/default.nix
@@ -3,7 +3,10 @@
 {
   imports = [
     ../../modules/common.nix
-    ../../modules/vpn/egress.nix
+
+    # taureau is an egress node in the renard tunnel.
+    # it routes traffic towards new york, united states.
+    ../../modules/tunnel/egress.nix
 
     ./hardware.nix
     ./devices.nix
@@ -11,6 +14,7 @@
 
   foundation = {
     www = {
+      # a tunnel egress node requires the http/https ports.
       enable = false;
 
       public = false;
diff --git a/machines/truite/default.nix b/machines/truite/default.nix
index 615bbc6..6b08235 100644
--- a/machines/truite/default.nix
+++ b/machines/truite/default.nix
@@ -3,7 +3,10 @@
 {
   imports = [
     ../../modules/common.nix
-    ../../modules/vpn/ingress.nix
+
+    # truite is the primary (and only) ingress node
+    # of the renard tunnel at `tunnel.rnrd.eu`.
+    ../../modules/tunnel/ingress.nix
 
     ./hardware.nix
     ./devices.nix