zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

Fix tinyproxy starting before VPN bridge is configured

Browse Source 
tinyproxy binds to the bridge IP but had no ordering dependency on
systemd-networkd, so it could start before the bridge existed.
This commit is contained in:
Zuckerberg
2026-03-01 13:20:56 -08:00
parent 7ec85cb406
commit e4f0d065f9
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
common/network/pia-vpn/default.nix
View File

@@ -230,7 +230,14 @@ in
Port = cfg.proxyPort;
};
};
systemd.services.tinyproxy.before = [ "container@pia-vpn.service" ];
systemd.services.tinyproxy = {
before = [ "container@pia-vpn.service" ];
after = [ "systemd-networkd.service" ];
requires = [ "systemd-networkd.service" ];
serviceConfig.ExecStartPre = [
"+${pkgs.systemd}/lib/systemd/systemd-networkd-wait-online --interface=${cfg.bridgeName}:no-carrier --timeout=60"
];
};
# WireGuard interface creation (host-side oneshot)
# Creates the interface in the host namespace so encrypted UDP stays in host netns.