1
0

profiles/dn42-router: Take over config from configuration/dn42

This commit is contained in:
clerie 2025-03-22 17:11:59 +01:00
parent 032987bce5
commit cfbeab8706
2 changed files with 19 additions and 1 deletions
hosts/dn42-il-gw5
profiles/dn42-router

@ -4,7 +4,6 @@
imports =
[
./hardware-configuration.nix
../../configuration/dn42
];
profiles.clerie.mercury-vm.enable = true;

@ -103,6 +103,25 @@ in {
};
systemd.network.config.addRouteTablesToIPRoute2 = true;
environment.systemPackages = with pkgs; [
wireguard-tools
];
boot.kernel.sysctl = {
"net.ipv4.ip_forward" = true;
"net.ipv6.conf.all.forwarding" = true;
};
networking.firewall.checkReversePath = false;
# Open Firewall for BGP
networking.firewall.allowedTCPPorts = [ 179 ];
# Open Fireall for OSPF
networking.firewall.extraCommands = ''
ip6tables -A INPUT -p ospfigp -j ACCEPT
iptables -A INPUT -p ospfigp -j ACCEPT
'';
systemd.network.netdevs."10-lo-dn42" = {
netdevConfig = {
Kind = "dummy";