nixos-module/container/upstream: add proper networking.nat.extraStopCommands

2021-05-14 18:37:45 +02:00 · 2021-05-14 18:37:45 +02:00 · b23b687dfb
parent 5d97e85bf6
commit b23b687dfb
1 changed files with 7 additions and 1 deletions
--- a/nix/nixos-module/container/upstream.nix
+++ b/nix/nixos-module/container/upstream.nix
@ -53,7 +53,6 @@ in
    extraCommands =
      builtins.concatStringsSep "\n" (
        map (net: ''
-          ip6tables -t nat -X ${net}_nat || true
          ip6tables -t nat -N ${net}_nat
          ${builtins.concatStringsSep "\n" (
            map (subnet: ''
@ -69,6 +68,13 @@ in
            -j ${net}_nat
        '') (builtins.attrNames upstreamInterfaces)
      );
+    extraStopCommands =
+      builtins.concatStringsSep "\n" (
+        map (net: ''
+          ip6tables -t nat -F POSTROUTING
+          ip6tables -t nat -X ${net}_nat
+        '') (builtins.attrNames upstreamInterfaces)
+      );
    inherit (hostConf) forwardPorts;
  };
 }