zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

fix networking online target + ntfy notifications
All checks were successful
Check Flake / check-flake (push) Successful in 3m36s
Details

Browse Source
This commit is contained in:
Zuckerberg
2026-02-25 23:24:23 -08:00
parent 1ac3f05e3e
commit f4a4edf478
3 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
common/network/pia-vpn/service-container.nix
View File

@@ -47,6 +47,24 @@ let
# DNS through VPN container (queries go through WG tunnel = no DNS leak)
networking.nameservers = [ cfg.vpnAddress ];
# Wait for actual VPN connectivity before network-online.target.
# Without this, services start before the VPN tunnel is ready and failures
# can't be reported to ntfy (no outbound connectivity yet).
systemd.services.wait-for-vpn = {
description = "Wait for VPN connectivity";
before = [ "network-online.target" ];
wantedBy = [ "network-online.target" ];
after = [ "systemd-networkd-wait-online.service" ];
serviceConfig.Type = "oneshot";
path = [ pkgs.iputils ];
script = ''
until ping -c1 -W2 1.1.1.1 >/dev/null 2>&1; do
echo "Waiting for VPN connectivity..."
sleep 1
done
'';
};
# Trust the bridge interface (host reaches us directly for nginx)
networking.firewall.trustedInterfaces = [ "eth0" ];