From e249f48cfffd62af2691d1a9e34b043f90eb49a0 Mon Sep 17 00:00:00 2001
From: Daniel Barlow <dan@telent.net>
Date: Wed, 1 May 2024 23:06:12 +0100
Subject: [PATCH]  add deps on {ins,rm}mod and kconfig for firewall module

---
 modules/firewall/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/modules/firewall/default.nix b/modules/firewall/default.nix
index b1196d6..fa4d99c 100644
--- a/modules/firewall/default.nix
+++ b/modules/firewall/default.nix
@@ -73,13 +73,17 @@ in
               };
           in svc.build args' ;
       };
-
+    programs.busybox.applets = [
+      "insmod" "rmmod"
+    ];
     kernel.config = {
       NETFILTER = "y";
       NETFILTER_ADVANCED = "y";
       NETFILTER_NETLINK = "m";
       NF_CONNTRACK = "m";
 
+      NETLINK_DIAG = "y";
+
       IP6_NF_IPTABLES=  "m";
       IP_NF_IPTABLES = "m";
       IP_NF_NAT = "m";