beatzaplenty/nixos
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(tailscale-router): actually insert MASQUERADE rule via extraCommands #70

Merged
beatzaplenty merged 1 commits from worktree-lovely-spinning-bubble into main 2026-07-25 23:56:11 +00:00
Conversation 0 Commits 1 Files Changed 1
+23 -11
beatzaplenty commented 2026-07-25 23:56:05 +00:00
Owner
Copy Link
Copy Source

networking.nat.externalInterface without internalInterfaces creates the
nixos-nat-post chain but inserts no MASQUERADE rule into it — confirmed
by inspecting the live firewall-start script on the deployed host.

Add the rule explicitly via firewall.extraCommands targeting nixos-nat-post,
scoped to LAN source traffic (vars.lanCidr) going out tailscale0.
extraStopCommands removes it on firewall stop.

Co-Authored-By: Claude Sonnet 4.6 noreply@anthropic.com

networking.nat.externalInterface without internalInterfaces creates the nixos-nat-post chain but inserts no MASQUERADE rule into it — confirmed by inspecting the live firewall-start script on the deployed host. Add the rule explicitly via firewall.extraCommands targeting nixos-nat-post, scoped to LAN source traffic (vars.lanCidr) going out tailscale0. extraStopCommands removes it on firewall stop. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
beatzaplenty added 1 commit 2026-07-25 23:56:05 +00:00
fix(tailscale-router): actually insert MASQUERADE rule via extraCommands
Check NixOS configurations / eval-hosts (pull_request) Successful in 10m34s
Details
781b1d324e 
networking.nat.externalInterface without internalInterfaces creates the
nixos-nat-post chain but inserts no MASQUERADE rule into it — confirmed
by inspecting the live firewall-start script on the deployed host.

Add the rule explicitly via firewall.extraCommands targeting nixos-nat-post,
scoped to LAN source traffic (vars.lanCidr) going out tailscale0.
extraStopCommands removes it on firewall stop.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
beatzaplenty merged commit 2860f750b4 into main 2026-07-25 23:56:11 +00:00
This repo is archived. You cannot comment on pull requests.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
beatzaplenty
No Assignees
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: beatzaplenty/nixos#70