This repository has no description
0

Configure Feed

Select the types of activity you want to include in your feed.

2configs/gg23.nix: enable IPv6 on internal network

Add ULA prefix fd42:7d6a::/64 on int0 with IPv6 Router Advertisement
so clients get IPv6 via SLAAC. Enable IPv6 forwarding and NAT66
masquerade for the ULA prefix. This fixes Jitsi (and other IPv6-only
services) not working from the internal network.

+19 -16
+19 -16
2configs/gg23.nix
··· 10 10 systemd.network.networks."50-et0" = { 11 11 matchConfig.Name = "et0"; 12 12 DHCP = "yes"; 13 - # dhcpV4Config.UseDNS = false; 14 - # dhcpV6Config.UseDNS = false; 15 13 linkConfig = { 16 14 RequiredForOnline = "routable"; 17 15 }; 18 16 networkConfig = { 19 - LinkLocalAddressing = "no"; 17 + IPv6AcceptRA = true; 18 + IPv6Forwarding = true; 20 19 }; 21 - # dhcpV6Config = { 22 - # PrefixDelegationHint = "::/60"; 23 - # }; 24 - # networkConfig = { 25 - # IPv6AcceptRA = true; 26 - # }; 27 - # ipv6PrefixDelegationConfig = { 28 - # Managed = true; 29 - # }; 30 20 }; 31 21 boot.kernel.sysctl."net.ipv4.ip_forward" = 1; 22 + boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = 1; 32 23 systemd.network.networks."10-int0" = { 33 24 name = "int0"; 34 25 address = [ 35 26 "10.42.0.1/24" 27 + "fd42:7d6a::1/64" 36 28 ]; 37 29 networkConfig = { 38 - # IPForward = "yes"; 39 - # IPMasquerade = "both"; 30 + IPv4Forwarding = true; 31 + IPv6Forwarding = true; 40 32 ConfigureWithoutCarrier = true; 41 33 DHCPServer = "yes"; 42 - # IPv6SendRA = "yes"; 43 - # DHCPPrefixDelegation = "yes"; 34 + IPv6SendRA = true; 44 35 }; 36 + ipv6Prefixes = [ 37 + { 38 + ipv6PrefixConfig = { 39 + Prefix = "fd42:7d6a::/64"; 40 + }; 41 + } 42 + ]; 45 43 dhcpServerStaticLeases = [ 46 44 { 47 45 # printer ··· 104 102 { 105 103 v6 = false; 106 104 predicate = "-s 10.42.0.0/24"; 105 + target = "MASQUERADE"; 106 + } 107 + { 108 + v4 = false; 109 + predicate = "-s fd42:7d6a::/64"; 107 110 target = "MASQUERADE"; 108 111 } 109 112 ];