nixos/firewall: DNAT by IP instead of incoming interface

2023-04-21 15:44:30 +01:00
parent 4d8935ffd6
commit d427de57fe
2 changed files with 6 additions and 5 deletions
--- a/nixos/boxes/colony/vms/estuary/default.nix
+++ b/nixos/boxes/colony/vms/estuary/default.nix
@@ -324,6 +324,7 @@ in
                nat = {
                  enable = true;
                  externalInterface = "wan";
+                  externalIP = assignments.internal.ipv4.address;
                  forwardPorts = [
                    {
                      port = "http";