From 674e6f1d3cdd585f4ed7704dfee1c33ff9783e91 Mon Sep 17 00:00:00 2001 From: Zuckerberg Date: Sun, 1 Mar 2026 13:20:56 -0800 Subject: [PATCH] Fix tinyproxy starting before VPN bridge is configured tinyproxy binds to the bridge IP but had no ordering dependency on systemd-networkd, so it could start before the bridge existed. --- common/network/pia-vpn/default.nix | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/common/network/pia-vpn/default.nix b/common/network/pia-vpn/default.nix index b89bd45..ea01e1e 100644 --- a/common/network/pia-vpn/default.nix +++ b/common/network/pia-vpn/default.nix @@ -230,7 +230,11 @@ in Port = cfg.proxyPort; }; }; - systemd.services.tinyproxy.before = [ "container@pia-vpn.service" ]; + systemd.services.tinyproxy = { + before = [ "container@pia-vpn.service" ]; + after = [ "systemd-networkd.service" ]; + requires = [ "systemd-networkd.service" ]; + }; # WireGuard interface creation (host-side oneshot) # Creates the interface in the host namespace so encrypted UDP stays in host netns.