JuliusFreudenberger/nix-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Rename network.nix to network-client.nix

Browse source 
It contains setting up NetworkManager which is not needed for servers
This commit is contained in:
JuliusFreudenberger 2025-01-18 20:40:08 +02:00
parent 989369d488
commit 55d9d233fe
3 changed files with 1 additions and 25 deletions
Download patch file Download diff file Expand all files Collapse all files

31
modules/network-client.nix Normal file
View file

@ -0,0 +1,31 @@
{
pkgs,
lib,
...
}: {
networking = {
networkmanager = {
enable = true;
wifi.powersave = true;
# logLevel = "INFO";
};
wireguard.enable = true;
firewall = {
# if packets are still dropped, they will show up in dmesg
logReversePathDrops = true;
# wireguard trips rpfilter up
extraCommands = ''
iptables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1194 -j RETURN
ip6tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --sport 1194 -j RETURN
iptables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1194 -j RETURN
ip6tables -t mangle -I nixos-fw-rpfilter -p udp -m udp --dport 1194 -j RETURN
'';
extraStopCommands = ''
iptables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1194 -j RETURN || true
ip6tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --sport 1194 -j RETURN || true
iptables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1194 -j RETURN || true
ip6tables -t mangle -D nixos-fw-rpfilter -p udp -m udp --dport 1194 -j RETURN || true
'';
};
};
}