sokai/mynixos-config
1
1
Fork 0
forked from mirrors_public/oddlama_nix-config
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: enable ip forwarding on ward

Browse source
This commit is contained in:
oddlama 2023-04-21 17:32:46 +02:00
parent deab5b335e
commit 20adc139f8
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 9 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

2
hosts/common/core/default.nix
View file

@ -53,7 +53,7 @@
boot = { boot = {
kernelParams = ["log_buf_len=10M"]; kernelParams = ["log_buf_len=10M"];
tmpOnTmpfs = true; tmp.useTmpfs = true;
}; };
# Disable sudo which is entierly unnecessary. # Disable sudo which is entierly unnecessary.

13
hosts/ward/net.nix
View file

@ -15,7 +15,10 @@ in {
"10-lan" = { "10-lan" = {
address = [net.lan.ipv4cidr net.lan.ipv6cidr]; address = [net.lan.ipv4cidr net.lan.ipv6cidr];
matchConfig.MACAddress = nodeSecrets.networking.interfaces.lan.mac; matchConfig.MACAddress = nodeSecrets.networking.interfaces.lan.mac;
networkConfig.IPv6PrivacyExtensions = "kernel"; networkConfig = {
IPForward = "yes";
IPv6PrivacyExtensions = "kernel";
};
dhcpV4Config.RouteMetric = 10; dhcpV4Config.RouteMetric = 10;
dhcpV6Config.RouteMetric = 10; dhcpV6Config.RouteMetric = 10;
}; };
@ -38,15 +41,15 @@ in {
zones = lib.mkForce { zones = lib.mkForce {
lan = { lan = {
interfaces = ["lan"]; interfaces = ["lan"];
ipv4Addresses = [(cidr.canonicalize net.lan.ipv4cidr)]; #ipv4Addresses = [(cidr.canonicalize net.lan.ipv4cidr)];
ipv6Addresses = [(cidr.canonicalize net.lan.ipv6cidr)]; #ipv6Addresses = [(cidr.canonicalize net.lan.ipv6cidr)];
}; };
wan = { wan = {
interfaces = ["wan"]; interfaces = ["wan"];
# TODO ipv4Addresses = [ net.wan.netv4 ]; # TODO ipv4Addresses = [ net.wan.netv4 ];
# TODO ipv6Addresses = [ net.wan.netv6 ]; # TODO ipv6Addresses = [ net.wan.netv6 ];
ipv4Addresses = ["192.168.1.0/22"]; #ipv4Addresses = ["192.168.1.0/22"];
ipv6Addresses = ["fd00::/64"]; #ipv6Addresses = ["fd00::/64"];
}; };
}; };