nixos: Tweak networking and prepare for more VMs

2022-05-28 15:30:12 +01:00
parent dc69948112
commit 64def7f564
7 changed files with 122 additions and 72 deletions
--- a/nixos/vms/estuary/default.nix
+++ b/nixos/vms/estuary/default.nix
@@ -85,7 +85,6 @@
                    networkConfig = {
                      IPv6AcceptRA = mkForce false;
                      IPv6SendRA = true;
-                      IPMasquerade = "both";
                    };
                    ipv6SendRAConfig = {
                      DNS = [ assignments.internal.ipv6.address ];
@@ -110,6 +109,13 @@
                  enable = true;
                  externalInterface = "wan";
                };
+                extraRules = ''
+                  table nat {
+                    chain postrouting {
+                      ip saddr 10.100.0.0/16 masquerade
+                    }
+                  }
+                '';
              };
            };
          }