{ ... }: { # Enable packet forwarding and pack logging boot.kernel.sysctl = { # Ipv4 "net.ipv4.conf.all.forwarding" = true; # Ipv6 "net.ipv6.conf.all.forwarding" = true; # NF "net.netfilter.nf_conntrack_acct" = 1; "net.netfilter.nf_conntrack_log_invalid" = 255; }; }