zuckerberg/nix-config
zuckerberg/nix-config
1
0
Fork 0
Code Issues Pull Requests Actions Activity

disable iodine for now

Browse Source
This commit is contained in:
zuckerberg 2021-09-24 14:22:21 -04:00
parent 42837ce836
commit fdda82775b
1 changed files with 10 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
machines/liza/configuration.nix
View File

@ -270,19 +270,19 @@ in {
};
# iodine DNS-based vpn
services.iodine.server = {
enable = true;
ip = "192.168.99.1";
domain = "tun.neet.dev";
passwordFile = "/run/secrets/iodine";
};
age.secrets.iodine.file = ../../secrets/iodine.age;
networking.firewall.allowedUDPPorts = [ 53 ];
#services.iodine.server = {
# enable = true;
# ip = "192.168.99.1";
# domain = "tun.neet.dev";
# passwordFile = "/run/secrets/iodine";
#};
#age.secrets.iodine.file = ../../secrets/iodine.age;
#networking.firewall.allowedUDPPorts = [ 53 ];
boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
#boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
networking.nat.enable = true;
networking.nat.internalInterfaces = [
"dns0" # iodine
# "dns0" # iodine
"ve-vpn-continer" # vpn container
];
networking.nat.externalInterface = "enp1s0";