Move generic config for dn42 routers to special module

2020-12-08 14:09:09 +01:00
parent dd7bdf8efa
commit 26cae76337
2 changed files with 13 additions and 13 deletions
--- a/configuration/dn42/default.nix
+++ b/configuration/dn42/default.nix
@@ -4,4 +4,17 @@
  environment.systemPackages = with pkgs; [
    wireguard-tools
  ];
+
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = true;
+    "net.ipv6.conf.all.forwarding" = true;
+  };
+
+  # Open Firewall for BGP
+  networking.firewall.allowedTCPPorts = [ 179 ];
+  # Open Fireall for OSPF
+  networking.firewall.extraCommands = ''
+  ip6tables -A INPUT -p ospfigp -j ACCEPT
+  iptables -A INPUT -p ospfigp -j ACCEPT
+  '';
 }