diff --git a/systems/LoutreOS/configuration.nix b/systems/LoutreOS/configuration.nix index 720c7d7..543e998 100644 --- a/systems/LoutreOS/configuration.nix +++ b/systems/LoutreOS/configuration.nix @@ -23,6 +23,8 @@ supportedFilesystems = [ "zfs" ]; tmp.useTmpfs = true; + + kernel.sysctl."net.ipv6.conf.all.forwarding" = true; }; documentation.nixos.enable = false; @@ -88,6 +90,7 @@ }; firewall = { + enable = true; allowedTCPPorts = [ 80 443 ]; allowedUDPPorts = [ ]; interfaces.eno2 = { @@ -101,7 +104,11 @@ 3483 # Slimserver ]; }; - enable = true; + extraCommands = '' + ip6tables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT + ip6tables -A FORWARD -j ACCEPT -i eno2 + ip6tables -A FORWARD -j nixos-fw-log-refuse + ''; }; }; @@ -118,6 +125,12 @@ IPv6AcceptRA = "yes"; }; }; + "40-eno2" = { + networkConfig = { + IPv6SendRA = "yes"; + DHCPPrefixDelegation = "yes"; + }; + }; "40-enp0s21u2".dhcpV4Config.RouteMetric = 1024; };