diff options
| author | Isabella Bastaja <isabella@sorre.xyz> | 2026-07-30 16:39:44 +0200 |
|---|---|---|
| committer | Isabella Bastaja <isabella@sorre.xyz> | 2026-07-30 16:40:21 +0200 |
| commit | 47c7a0bc35761793feea4f2c16d741f1073546a5 (patch) | |
| tree | 9398e9ad514ed4bd8de066ca88f8e6377ef63493 | |
| parent | fd32dd977fa230b880b550b044f47090f6987f66 (diff) | |
wip: disable ipv6 fw on interfaces other than wg0
| -rw-r--r-- | hosts/sagittarius/network.nix | 3 | ||||
| -rw-r--r-- | wireguard.nix | 2 |
2 files changed, 4 insertions, 1 deletions
diff --git a/hosts/sagittarius/network.nix b/hosts/sagittarius/network.nix index d201590..8d21275 100644 --- a/hosts/sagittarius/network.nix +++ b/hosts/sagittarius/network.nix @@ -64,6 +64,9 @@ networkConfig.DHCP = "ipv4"; address = [ "2a01:4f9:c012:c7a7::1/64" ]; routes = [ { Gateway = "fe80::1"; } ]; + # networkConfig = { + # IPv6Forwarding = false; + # }; }; }; }; diff --git a/wireguard.nix b/wireguard.nix index 278ae0c..20307a1 100644 --- a/wireguard.nix +++ b/wireguard.nix @@ -102,6 +102,6 @@ in boot.kernel.sysctl = lib.mkIf isHub { # I *think* this should be fine since networkd will prevent forwarding # on any interface that doesn't have IPv6Forwarding set to true. - "net.ipv6.conf.all.forwarding" = true; + "net.ipv6.conf.wg0.forwarding" = true; }; } |