summaryrefslogtreecommitdiff
path: root/modules/yggdrasil-wg
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2021-10-09 11:30:33 +0200
committerGregor Kleen <gkleen@yggdrasil.li>2021-10-09 11:30:33 +0200
commit8bf9f82d92c5ebdf02d8ef30a7a11ee3b889828a (patch)
treeb944403cac6aba328ab6a895bb8c71185e40a212 /modules/yggdrasil-wg
parentcbe13936a152eaab0e421c9dd1d19787e2ed7f16 (diff)
downloadnixos-8bf9f82d92c5ebdf02d8ef30a7a11ee3b889828a.tar
nixos-8bf9f82d92c5ebdf02d8ef30a7a11ee3b889828a.tar.gz
nixos-8bf9f82d92c5ebdf02d8ef30a7a11ee3b889828a.tar.bz2
nixos-8bf9f82d92c5ebdf02d8ef30a7a11ee3b889828a.tar.xz
nixos-8bf9f82d92c5ebdf02d8ef30a7a11ee3b889828a.zip
yggdrasil-wg: ...
Diffstat (limited to 'modules/yggdrasil-wg')
-rw-r--r--modules/yggdrasil-wg/default.nix8
1 files changed, 4 insertions, 4 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix
index d0d6e522..d73c7f3f 100644
--- a/modules/yggdrasil-wg/default.nix
+++ b/modules/yggdrasil-wg/default.nix
@@ -94,14 +94,14 @@ in {
94 systemd.services.firewall.path = optionals isRouter [pkgs.procps]; 94 systemd.services.firewall.path = optionals isRouter [pkgs.procps];
95 networking.firewall = mkIf isRouter { 95 networking.firewall = mkIf isRouter {
96 extraCommands = '' 96 extraCommands = ''
97 iptables -A FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept 97 ip6tables -A FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept
98 iptables -A FORWARD -j nixos-fw-log-refuse 98 ip46tables -A FORWARD -j nixos-fw-log-refuse
99 sysctl net.ipv6.conf.all.forwarding=1 99 sysctl net.ipv6.conf.all.forwarding=1
100 ''; 100 '';
101 extraStopCommands = '' 101 extraStopCommands = ''
102 sysctl net.ipv6.conf.all.forwarding=0 102 sysctl net.ipv6.conf.all.forwarding=0
103 iptables -D FORWARD -j nixos-fw-log-refuse 103 ip46tables -D FORWARD -j nixos-fw-log-refuse || true
104 iptables -D FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept 104 ip6tables -D FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept || true
105 ''; 105 '';
106 }; 106 };
107 }; 107 };