magic_rb/dotfiles
1
0
Fork 0
mirror of https://git.sr.ht/~magic_rb/dotfiles synced 2024-11-25 09:36:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Restore podman iptable rules after nftable restart on omen

Browse source 
Signed-off-by: magic_rb <magic_rb@redalder.org>
This commit is contained in:
magic_rb 2024-01-18 14:09:59 +01:00
parent 97d1ff5896
commit 53e7c51b94
No known key found for this signature in database
GPG key ID: 08D5287CC5DDCA0E
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
nixos/systems/omen/firewall.nix
View file

@ -17,6 +17,13 @@
# pkgs.writeText "nftables.json" (builtins.toJSON (with notnft.dsl; with payload; ruleset
with notnft.dsl; with payload; ruleset {
filter = add table { family = f: f.inet; } {
networking.notnft.postStop = ''
${lib.getExe pkgs.podman} network reload -a
'';
networking.notnft.postStart = ''
${lib.getExe pkgs.podman} network reload -a
'';
trace = traceChain;
### lo