This commit is contained in:
2022-11-07 08:14:35 +01:00
parent e5cec47a00
commit b9c0f5f3bc
3 changed files with 22 additions and 1 deletions

View File

@@ -30,4 +30,20 @@ services.pcscd.enable = true;
###### NTFS (3G) support ######
boot.supportedFilesystems = [ "ntfs" ];
}
##### Let wiregurad thru firewall ##########
networking.firewall = {
# if packets are still dropped, they will show up in dmesg
logReversePathDrops = true;
# wireguard trips rpfilter up
extraCommands = ''
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1637 -j RETURN
ip46tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1637 -j RETURN
'';
extraStopCommands = ''
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1637 -j RETURN || true
ip46tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1637 -j RETURN || true
'';
};
}