zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

networking fixes
Some checks failed
Check Flake / check-flake (push) Failing after 1m7s
Details

Browse Source
This commit is contained in:
Zuckerberg
2026-02-24 23:53:50 -08:00
parent 1cbbe64707
commit 3bc41dfdb3
1 changed files with 147 additions and 144 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
common/network/pia-vpn/vpn-container.nix
View File

@@ -51,6 +51,9 @@ let
in in
{ {
config = mkIf cfg.enable { config = mkIf cfg.enable {
# Give the container more time to boot (pia-vpn-setup retries can delay readiness)
systemd.services."container@pia-vpn".serviceConfig.TimeoutStartSec = "180s";
containers.pia-vpn = { containers.pia-vpn = {
autoStart = true; autoStart = true;
ephemeral = true; ephemeral = true;
@@ -157,7 +160,7 @@ in
connectToServer '${wgFile}' '${cfg.interfaceName}' connectToServer '${wgFile}' '${cfg.interfaceName}'
# 4. Default route through WG # 4. Default route through WG
ip route add default dev ${cfg.interfaceName} ip route replace default dev ${cfg.interfaceName}
echo "Default route set through ${cfg.interfaceName}" echo "Default route set through ${cfg.interfaceName}"
# 5. NAT: masquerade bridge → WG (so service containers' traffic appears to come from VPN IP) # 5. NAT: masquerade bridge → WG (so service containers' traffic appears to come from VPN IP)