Commit 5e67a282e264

Vincent Demeester <vincent@sbr.pm>
2025-07-02 23:07:09
systems: trying to fix kerkouane network issue
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
main
1 parent 6b2a7ff
Changed files (2)
modules
wireguard-server.nix
systems
kerkouane
boot.nix
modules/wireguard-server.nix
@@ -35,7 +35,7 @@ in
     environment.systemPackages = [ pkgs.wireguard-tools ];
     boot.kernel.sysctl."net.ipv4.ip_forward" = lib.mkForce 1; # FIXME should probably be mkDefault
     networking.firewall.extraCommands = ''
-      iptables -t nat -A POSTROUTING -s10.100.0.0/24 -j MASQUERADE
+      iptables -t nat -A POSTROUTING -s10.100.0.0/32 -j MASQUERADE
       iptables -A FORWARD -i wg+ -j ACCEPT
     '';
     networking.firewall.allowedUDPPorts = [ 51820 ];
systems/kerkouane/boot.nix
@@ -1,5 +1,6 @@
 { lib, ... }:
 {
+  console.keyMap = lib.mkForce "us";
   boot.loader.grub.device = "/dev/vda";
   boot.loader.grub.enable = lib.mkForce true;
   boot.loader.systemd-boot.enable = lib.mkForce false;