dev/nixfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Compare commits

base: dev:40c491aa14aba68fcb83c542ea0a9f00041eeb6e
Branches Tags
dev:master
dev:fastback-ssh
dev:installer
..
compare: dev:b420f2377cd4a022ea01a5c45d765bde420093e0
Branches Tags
dev:master
dev:fastback-ssh
dev:installer

No commits in common. "40c491aa14aba68fcb83c542ea0a9f00041eeb6e" and "b420f2377cd4a022ea01a5c45d765bde420093e0" have entirely different histories.
40c491aa14 ... b420f2377c

2 changed files with 3 additions and 13 deletions
Show Stats Expand all files Collapse all files

10
nixos/boxes/home/routing-common/default.nix
View File

@ -226,7 +226,7 @@ in
extraConfig = '' extraConfig = ''
[CAKE] [CAKE]
Bandwidth=235M Bandwidth=235M
RTTSec=50ms RTTSec=10ms
PriorityQueueingPreset=besteffort PriorityQueueingPreset=besteffort
# DOCSIS preset # DOCSIS preset
OverheadBytes=18 OverheadBytes=18
@ -250,7 +250,7 @@ in
[CAKE] [CAKE]
Parent=root Parent=root
Bandwidth=24M Bandwidth=24M
RTTSec=50ms RTTSec=1ms
''; '';
} }
]; ];
@ -370,12 +370,6 @@ in
return return
} }
chain forward-early {
type filter hook forward priority -1; policy accept;
# MSS clamping to workaround IPv6 PMTUD being broken...
tcp flags syn tcp option maxseg size set rt mtu counter
}
chain forward { chain forward {
${lib.my.c.as211024.nftTrust} ${lib.my.c.as211024.nftTrust}
iifname lan-untrusted jump filter-untrusted iifname lan-untrusted jump filter-untrusted

6
nixos/boxes/home/routing-common/kea.nix
View File

@ -26,11 +26,7 @@ in
}; };
systemd.services = { systemd.services = {
kea-dhcp4-server.serviceConfig = { kea-dhcp4-server.serviceConfig.DynamicUser = mkForce false;
# Sometimes interfaces might not be ready in time and Kea doesn't like that
Restart = "on-failure";
DynamicUser = mkForce false;
};
kea-dhcp-ddns-server.serviceConfig.DynamicUser = mkForce false; kea-dhcp-ddns-server.serviceConfig.DynamicUser = mkForce false;
}; };