commit 2f7a2c7efaa2e676612d36c660b21e360f702290 · kitten.sh/system

+3 -1

modules/router/kernel.nix

···

       56
        
             "net.ipv4.tcp_syncookies" = true;

     

       57
        
       

     

       58
        
             "net.ipv6.conf.all.forwarding" = true;

     

       59
       -
             "net.ipv6.conf.all.accept_ra" = 2;

     

       0
        
       
     

       0
        
       
     

       60
        
       

     

       61
        
             "kernel.kptr_restrict" = 2;

     

       62
        
             "kernel.dmesg_restrict" = 0;

···

       56
        
             "net.ipv4.tcp_syncookies" = true;

     

       57
        
       

     

       58
        
             "net.ipv6.conf.all.forwarding" = true;

     

       59
       +
             "net.ipv6.conf.all.accept_ra" = if cfg.ipv6 then 2 else false;

     

       60
       +
             "net.ipv6.conf.all.autoconf" = false;

     

       61
       +
             "net.ipv6.conf.all.use_tempaddr" = false;

     

       62
        
       

     

       63
        
             "kernel.kptr_restrict" = 2;

     

       64
        
             "kernel.dmesg_restrict" = 0;

+2 -2

modules/router/network.nix

···

       157
        
                   Address = intern.cidr;

     

       158
        
                   DHCPServer = true;

     

       159
        
                   IPv4Forwarding = true;

     

       160
       -
                   IPv6Forwarding = true;

     

       161
       -
                   IPMasquerade = "both";

     

       162
        
                   ConfigureWithoutCarrier = true;

     

       163
        
                   MulticastDNS = cfg.mdns;

     

       164
        
                   DHCPPrefixDelegation = cfg.ipv6;

···

       157
        
                   Address = intern.cidr;

     

       158
        
                   DHCPServer = true;

     

       159
        
                   IPv4Forwarding = true;

     

       160
       +
                   IPv6Forwarding = cfg.ipv6;

     

       161
       +
                   IPMasquerade = if cfg.ipv6 then "ipv4" else "both";

     

       162
        
                   ConfigureWithoutCarrier = true;

     

       163
        
                   MulticastDNS = cfg.mdns;

     

       164
        
                   DHCPPrefixDelegation = cfg.ipv6;