zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

enable iodine

Browse Source
This commit is contained in:
zuckerberg 2021-11-15 09:25:53 -05:00
parent 877b34578e
commit 09000f3748
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
machines/liza/configuration.nix
View File

@ -282,19 +282,19 @@ in {
};
# iodine DNS-based vpn
#services.iodine.server = {
# enable = true;
# ip = "192.168.99.1";
# domain = "tun.neet.dev";
# passwordFile = "/run/secrets/iodine";
#};
#age.secrets.iodine.file = ../../secrets/iodine.age;
#networking.firewall.allowedUDPPorts = [ 53 ];
services.iodine.server = {
enable = true;
ip = "192.168.99.1";
domain = "tun.neet.dev";
passwordFile = "/run/secrets/iodine";
};
age.secrets.iodine.file = ../../secrets/iodine.age;
networking.firewall.allowedUDPPorts = [ 53 ];
#boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
networking.nat.enable = true;
networking.nat.internalInterfaces = [
# "dns0" # iodine
"dns0" # iodine
"ve-vpn-continer" # vpn container
];
networking.nat.externalInterface = "enp1s0";