delroth/raito-shared-public-infra
0
0
Fork 0
forked from raito/shared-public-infra
Code Pull requests Activity

bagel-container: provide IPv4 NAT for outbound access

Browse source
This commit is contained in:
Pierre Bourdon 2024-06-23 20:24:46 +02:00
parent 7d9d2a93df
commit a1c645a1e6
Signed by: delroth
GPG key ID: 6FB80DCD84DA0F1C
2 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
modules/bagel-container.nix
View file

@ -14,6 +14,7 @@
networkConfig = { networkConfig = {
Bridge = "wan-br"; Bridge = "wan-br";
VirtualEthernetExtra = "vb-bagel-v4:host1";
}; };
}; };
@ -23,4 +24,10 @@
after = [ "network.target" ]; after = [ "network.target" ];
overrideStrategy = "asDropin"; overrideStrategy = "asDropin";
}; };
systemd.network.networks."20-vb-bagel-v4" = {
matchConfig.Name = "vb-bagel-v4";
networkConfig.Address = [ "172.16.100.1/24" ];
networkConfig.IPMasquerade = true;
};
} }

4
modules/network.nix
View file

@ -14,8 +14,8 @@
'') '')
config.networking.newtype.hosts); config.networking.newtype.hosts);
# leave container interfaces alone # leave container interfaces alone unless otherwise specified
systemd.network.networks."05-veth".extraConfig = '' systemd.network.networks."95-veth".extraConfig = ''
[Match] [Match]
Driver = veth Driver = veth