🧱 move natting to wireguard file

2023-04-26 21:05:19 +02:00 · 2023-04-26 21:05:19 +02:00 · 1b1d862f10
parent 073c1cb388
commit 1b1d862f10
2 changed files with 6 additions and 3 deletions
--- a/hosts/hydrogen/configuration.nix
+++ b/hosts/hydrogen/configuration.nix
@ -23,8 +23,6 @@
    maxretry = 5;
  };

-  networking.nat.enable = true;
-
  users.mutableUsers = false;
  users.users.root.openssh.authorizedKeys.keys = [
    "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINTvwXCT99s1EwOCeGQ28jyCAH/RBoLZza9k5I7wWdEu"
--- a/hosts/hydrogen/services/wireguard/default.nix
+++ b/hosts/hydrogen/services/wireguard/default.nix
@ -6,7 +6,12 @@
      ];
    };

-    nat.internalInterfaces = [ "wg0" ];
+    nat = {
+      enable = true;
+      enableIPv6 = true;
+      externalInterface = "ens3";
+      internalInterfaces = [ "wg0" ];
+    };

    wireguard.interfaces = {
      wg0 = {