zentralwerk/network
zentralwerk
/
network
12
4
Fork 2
Code Issues 5 Pull Requests 1 Releases Wiki Activity

nixos-module/container/upstream: specify externalIP to use SNAT instead of MASQUERADE

This commit is contained in:
Astro 2021-09-06 23:17:46 +02:00
parent 1b4f761de8
commit 501f96a225
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
nix/nixos-module/container/upstream.nix
View File

@ -56,6 +56,7 @@ in
enable = true;
internalInterfaces = [ "core" ];
externalInterface = firstUpstreamInterface;
externalIP = upstreamInterfaces.${firstUpstreamInterface}.upstream.staticIpv4Address;
extraCommands =
# Provide IPv6 upstream for everyone, using NAT66 when not from
# our static prefixes