zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

networking fixes
All checks were successful
Check Flake / check-flake (push) Successful in 3m18s
Details

Browse Source
This commit is contained in:
Zuckerberg
2026-02-24 23:37:15 -08:00
parent a0fcacdcf9
commit 6191e4060f
3 changed files with 5 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
common/network/pia-vpn/default.nix
View File

@@ -175,8 +175,8 @@ in
# Enable systemd-networkd for bridge management # Enable systemd-networkd for bridge management
systemd.network.enable = true; systemd.network.enable = true;
# Don't let systemd-networkd-wait-online block boot on bridge # TODO: re-enable once primary networking uses networkd
systemd.network.wait-online.ignoredInterfaces = [ cfg.bridgeName ]; systemd.network.wait-online.enable = false;
# Tell NetworkManager to ignore VPN bridge and container interfaces # Tell NetworkManager to ignore VPN bridge and container interfaces
networking.networkmanager.unmanaged = mkIf config.networking.networkmanager.enable [ networking.networkmanager.unmanaged = mkIf config.networking.networkmanager.enable [

1
common/network/pia-vpn/service-container.nix
View File

@@ -40,7 +40,6 @@ let
Gateway = cfg.vpnAddress; Gateway = cfg.vpnAddress;
DNS = [ cfg.vpnAddress ]; DNS = [ cfg.vpnAddress ];
}; };
linkConfig.RequiredForOnline = "no";
}; };
# DNS through VPN container (queries go through WG tunnel = no DNS leak) # DNS through VPN container (queries go through WG tunnel = no DNS leak)

4
common/network/pia-vpn/vpn-container.nix
View File

@@ -81,9 +81,11 @@ in
Address = "${cfg.vpnAddress}/${cfg.subnetPrefixLen}"; Address = "${cfg.vpnAddress}/${cfg.subnetPrefixLen}";
DHCPServer = false; DHCPServer = false;
}; };
linkConfig.RequiredForOnline = "no";
}; };
# Ignore WG interface for wait-online (it's configured manually, not by networkd)
systemd.network.wait-online.ignoredInterfaces = [ cfg.interfaceName ];
# Enable forwarding so bridge traffic can go through WG # Enable forwarding so bridge traffic can go through WG
boot.kernel.sysctl."net.ipv4.ip_forward" = 1; boot.kernel.sysctl."net.ipv4.ip_forward" = 1;