···

       
42
       
42
       
 
       
      # DO NOT COPY THIS TO PRODUCTION AS IS. Think about it at least twice.

     

       
43
       
43
       
 
       
      # Everyone on the "isp" machine will be able to add routes to the kernel.

     

       
44
       
44
       
 
       
      security.wrappers.add-dhcpd-lease = {

     

       
45
       
45
       
+
       
        owner = "root";

     

       
46
       
46
       
+
       
        group = "root";

     

       
45
       
47
       
 
       
        source = pkgs.writeShellScript "add-dhcpd-lease" ''

     

       
46
       
48
       
 
       
          exec ${pkgs.iproute2}/bin/ip -6 route replace "$1" via "$2"

     

       
47
       
49
       
 
       
        '';