nixos/middleman: SNAT IPv6 to assigned address

2025-10-01 11:10:41 +01:00
parent 7bfe9ad697
commit 25758bae08
1 changed files with 7 additions and 0 deletions
--- a/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
+++ b/nixos/boxes/colony/vms/shill/containers/middleman/default.nix
@@ -72,6 +72,13 @@ in

            firewall = {
              tcp.allowed = [ "http" "https" 8448 ];
+              extraRules = ''
+                table inet nat {
+                  chain postrouting {
+                    oifname host0 snat ip6 to ${assignments.internal.ipv6.address}
+                  }
+                }
+              '';
            };

            nginx-sso = {