zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

networking fixes
All checks were successful
Check Flake / check-flake (push) Successful in 3m18s
Details

Browse Source
This commit is contained in:
Zuckerberg
2026-02-24 23:46:51 -08:00
parent 6191e4060f
commit 1cbbe64707
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
common/network/pia-vpn/vpn-container.nix
View File

@@ -120,6 +120,7 @@ in
serviceConfig = { serviceConfig = {
Type = "simple"; Type = "simple";
Restart = "always"; Restart = "always";
RestartSec = "10s";
RuntimeMaxSec = "30d"; RuntimeMaxSec = "30d";
}; };
@@ -127,6 +128,12 @@ in
set -euo pipefail set -euo pipefail
${scripts.scriptCommon} ${scripts.scriptCommon}
# Clean up stale state from previous attempts
ip -4 address flush dev ${cfg.interfaceName} 2>/dev/null || true
ip route del default dev ${cfg.interfaceName} 2>/dev/null || true
iptables -t nat -F 2>/dev/null || true
iptables -F FORWARD 2>/dev/null || true
proxy="${proxy}" proxy="${proxy}"
# 1. Authenticate with PIA via proxy (VPN container has no internet yet) # 1. Authenticate with PIA via proxy (VPN container has no internet yet)