diff options
Diffstat (limited to 'modules/yggdrasil-wg')
| -rw-r--r-- | modules/yggdrasil-wg/default.nix | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/modules/yggdrasil-wg/default.nix b/modules/yggdrasil-wg/default.nix index d0d6e522..d73c7f3f 100644 --- a/modules/yggdrasil-wg/default.nix +++ b/modules/yggdrasil-wg/default.nix | |||
| @@ -94,14 +94,14 @@ in { | |||
| 94 | systemd.services.firewall.path = optionals isRouter [pkgs.procps]; | 94 | systemd.services.firewall.path = optionals isRouter [pkgs.procps]; |
| 95 | networking.firewall = mkIf isRouter { | 95 | networking.firewall = mkIf isRouter { |
| 96 | extraCommands = '' | 96 | extraCommands = '' |
| 97 | iptables -A FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept | 97 | ip6tables -A FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept |
| 98 | iptables -A FORWARD -j nixos-fw-log-refuse | 98 | ip46tables -A FORWARD -j nixos-fw-log-refuse |
| 99 | sysctl net.ipv6.conf.all.forwarding=1 | 99 | sysctl net.ipv6.conf.all.forwarding=1 |
| 100 | ''; | 100 | ''; |
| 101 | extraStopCommands = '' | 101 | extraStopCommands = '' |
| 102 | sysctl net.ipv6.conf.all.forwarding=0 | 102 | sysctl net.ipv6.conf.all.forwarding=0 |
| 103 | iptables -D FORWARD -j nixos-fw-log-refuse | 103 | ip46tables -D FORWARD -j nixos-fw-log-refuse || true |
| 104 | iptables -D FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept | 104 | ip6tables -D FORWARD -i yggdrasil -o yggdrasil -j nixos-fw-accept || true |
| 105 | ''; | 105 | ''; |
| 106 | }; | 106 | }; |
| 107 | }; | 107 | }; |