nixos/git: Fix container network access

2023-12-09 17:19:18 +00:00
parent 54f628d3a5
commit 027cf2af6b
3 changed files with 28 additions and 15 deletions
--- a/nixos/boxes/colony/vms/git/default.nix
+++ b/nixos/boxes/colony/vms/git/default.nix
@@ -84,6 +84,7 @@ in
              oci-containers = {
                backend = "podman";
              };
+              containers.containersConf.settings.network.default_subnet = "10.88.0.0/16";
            };

            systemd.network = {
@@ -108,7 +109,13 @@ in

              firewall = {
                tcp.allowed = [ 19999 ];
-                trustedInterfaces = [ "oci" ];
+                extraRules = ''
+                  table inet filter {
+                    chain forward {
+                      ip saddr 10.88.0.0/16 accept
+                    }
+                  }
+                '';
              };
            };
          }