nixos

commit 490d7f32e3b4f195da391be4cbefd57c70cd021d
parent 16083fc6cdf1ea7744e258e474da8894edd9fda0
Author: MTRNord <mtrnord1@gmail.com>
Date:   Sun, 28 Jan 2024 00:31:59 +0100

Debug

Diffstat:
M
nixos/worker-1/configuration.nix
 | 
9
+--------
M
nixos/worker-2/configuration.nix
 | 
9
+--------

2 files changed, 2 insertions(+), 16 deletions(-)
diff --git a/nixos/worker-1/configuration.nix b/nixos/worker-1/configuration.nix
@@ -235,13 +235,6 @@ in {
     useDHCP = true;
     # networkmanager.enable = true;
 
-    nat = {
-      enable = true;
-      enableIPv6 = true;
-      externalInterface = "enp1s0";
-      internalInterfaces = ["wg0"];
-    };
-
     nameservers = ["8.8.8.8" "8.8.4.4"];
 
     firewall = let
@@ -296,7 +289,7 @@ in {
       ];
     in {
       checkReversePath = "loose";
-      trustedInterfaces = ["lxc*" "cilium*" "floating1" "enp7s0"];
+      trustedInterfaces = ["lxc*" "cilium*" "floating1" "enp7s0" "gre_nordgedanken" "gre_worker2"];
       enable = true;
       allowPing = true;
       allowedTCPPorts = [
diff --git a/nixos/worker-2/configuration.nix b/nixos/worker-2/configuration.nix
@@ -214,13 +214,6 @@ in {
     useDHCP = true;
     # networkmanager.enable = true;
 
-    nat = {
-      enable = true;
-      enableIPv6 = true;
-      externalInterface = "enp1s0";
-      internalInterfaces = ["wg0"];
-    };
-
     nameservers = ["8.8.8.8" "8.8.4.4"];
 
     firewall = let
@@ -275,7 +268,7 @@ in {
       ];
     in {
       checkReversePath = "loose";
-      trustedInterfaces = ["lxc*" "cilium*" "enp7s0"];
+      trustedInterfaces = ["lxc*" "cilium*" "enp7s0" "gre_worker1" "gre_nordgedanken"];
       enable = true;
       allowPing = true;
       allowedTCPPorts = [