networking.nat: replace network-interfaces.target
We can replace this safely with network-pre because iptables does not care whether the interfaces exist or not.
This commit is contained in:
parent
60430b140c
commit
8524df1259
@ -171,7 +171,7 @@ in
|
||||
systemd.services = mkIf (!config.networking.firewall.enable) { nat = {
|
||||
description = "Network Address Translation";
|
||||
wantedBy = [ "network.target" ];
|
||||
after = [ "network-interfaces.target" "systemd-modules-load.service" ];
|
||||
after = [ "network-pre.target" "systemd-modules-load.service" ];
|
||||
path = [ pkgs.iptables ];
|
||||
unitConfig.ConditionCapability = "CAP_NET_ADMIN";
|
||||
|
||||
|
Loading…
Reference in New Issue
Block a user