ecoppens/infrastructure
1
0
Fork 0
forked from DGNum/infrastructure
Code Pull requests Activity

feat(nat): Enable nat (with ip_forward)

Browse source
This commit is contained in:
catvayor 2024-05-26 20:49:02 +02:00
parent a00833c682
commit 37a18c0347
Signed by untrusted user: lbailly
GPG key ID: CE3E645251AC63F3
1 changed files with 17 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
machines/vault01/networking.nix
View file

@ -190,5 +190,21 @@ in
};
};
networking.firewall.allowedUDPPorts = [ 67 ];
networking = {
nftables = {
enable = true;
tables.nat = {
family = "ip";
content = ''
chain postrouting {
type nat hook postrouting priority 100;
snat ip to 129.199.195.130-129.199.195.158
}
'';
};
};
firewall.allowedUDPPorts = [ 67 ];
};
boot.kernel.sysctl."net.ipv4.ip_forward" = true;
}