nix/shared/bastion/forward.nix
2025-07-22 18:24:28 +02:00

14 lines
No EOL
336 B
Nix

{ ... }:
{
# Enable packet forwarding and pack logging
boot.kernel.sysctl = {
# Ipv4
"net.ipv4.conf.all.forwarding" = true;
# Ipv6
"net.ipv6.conf.all.forwarding" = true;
# NF
"net.netfilter.nf_conntrack_acct" = 1;
"net.netfilter.nf_conntrack_log_invalid" = 255;
};
}