1
0

Compare commits

...

3 Commits

3 changed files with 10 additions and 2 deletions

View File

@@ -60,4 +60,10 @@
ip46tables -t mangle -A forward-mangle -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
'';
networking.firewall.extraCommands = ''
# Reject all IPv4 traffic that tries to enter and leave the PPP tunnel
iptables -I INPUT -i ppp-ncfttb -j DROP
iptables -I OUTPUT -o ppp-ncfttb -j DROP
'';
}

View File

@@ -8,7 +8,7 @@ with lib;
boot.resumeDevice = lib.optionalString ((lib.length config.swapDevices) > 0) (lib.head config.swapDevices).device;
services.logind = {
lidSwitch = "suspend-then-hibernate";
settings.Login.HandleLidSwitch = "suspend-then-hibernate";
};
systemd.sleep.extraConfig = ''
HibernateDelaySec=30m

View File

@@ -11,8 +11,10 @@ with lib;
config = mkIf config.profiles.clerie.router.enable {
environment.systemPackages = with pkgs; [
wireguard-tools
conntrack-tools
iptstate # show conntrack table
tcpdump
wireguard-tools
];
boot.kernel.sysctl = {