zentralwerk/network
zentralwerk
/
network
12
4
Fork 2
Code Issues 3 Pull Requests 1 Releases Wiki Activity

Fix eval and nat rules

This commit is contained in:
Sandro - 2024-04-12 00:11:21 +02:00
parent 611ac377be
commit 6a29757919
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nix/nixos-module/container/upstream.nix
View File

@ -105,14 +105,14 @@ in
-j DNAT --to-destination ${fwd.destination}
iptables -t nat -A nixos-nat-post \
-d ${fwd.destination} -p ${fwd.proto} \
-d ${lib.elemAt (builtins.match "([0-9.]+):([0-9-]+)" fwd.destination) 0} -p ${fwd.proto} \
--dport ${builtins.toString fwd.destination} \
-s ${config.site.net.core.subnet4} -j MASQUERADE
iptables -t nat -A nixos-nat-post \
-d ${fwd.destination} -p ${fwd.proto} \
-d ${lib.elemAt (builtins.match "([0-9.]+):([0-9-]+)" fwd.destination) 0} -p ${fwd.proto} \
--dport ${builtins.toString fwd.destination} \
-s ${config.site.net.c3d2.subnets4} -j MASQUERADE
-s ${config.site.net.c3d2.subnet4} -j MASQUERADE
'') config.networking.nat.forwardPorts}
''}