clerie/nixfiles
1
0
Fork 0
Code

Enable IPv6 on guest net

Browse Source
This commit is contained in:
clerie 2022-04-03 13:28:08 +02:00
parent 82f22ef444
commit f93c4a0d11
1 changed files with 11 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
hosts/carbon/configuration.nix
View File

@ -61,6 +61,7 @@
}; };
networking.interfaces."enp1s0.202".ipv6.addresses = [ networking.interfaces."enp1s0.202".ipv6.addresses = [
{ address = "fd00:3214:9453:4920::1"; prefixLength = 64; } { address = "fd00:3214:9453:4920::1"; prefixLength = 64; }
{ address = "2001:4cd8:100:1313::1"; prefixLength = 64; } # public IPs for local network
]; ];
networking.interfaces."enp1s0.202".ipv4.addresses = [ networking.interfaces."enp1s0.202".ipv4.addresses = [
{ address = "192.168.32.1"; prefixLength = 24; } { address = "192.168.32.1"; prefixLength = 24; }
@ -93,6 +94,12 @@
RDNSS fd00:152:152::1 {}; RDNSS fd00:152:152::1 {};
DNSSL net.clerie.de {}; DNSSL net.clerie.de {};
}; };
interface enp1s0.202 {
AdvSendAdvert on;
prefix 2001:4cd8:100:1313::/64 {};
route ::/0 {};
RDNSS 2620:fe::fe {}; # Quad 9
};
''; '';
services.kea.dhcp4 = { services.kea.dhcp4 = {
@ -258,10 +265,10 @@
networking.firewall.allowedTCPPorts = [ 53 ]; networking.firewall.allowedTCPPorts = [ 53 ];
networking.firewall.extraCommands = '' networking.firewall.extraCommands = ''
iptables -A FORWARD -i enp1s0.202 -o ppp-ntvdsl -j ACCEPT ip46tables -A FORWARD -i enp1s0.202 -o ppp-ntvdsl -j ACCEPT
iptables -A FORWARD -i enp1s0.202 -j DROP ip46tables -A FORWARD -i enp1s0.202 -j DROP
iptables -A FORWARD -i ppp-ntvdsl -o enp1s0.202 -j ACCEPT ip46tables -A FORWARD -i ppp-ntvdsl -o enp1s0.202 -j ACCEPT
iptables -A FORWARD -o enp1s0.202 -j DROP ip46tables -A FORWARD -o enp1s0.202 -j DROP
''; '';
services.pppd = { services.pppd = {