nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

beatzaplentyandClaude Sonnet 4.6 781b1d324e

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m34s

Details

fix(tailscale-router): actually insert MASQUERADE rule via extraCommands

networking.nat.externalInterface without internalInterfaces creates the
nixos-nat-post chain but inserts no MASQUERADE rule into it — confirmed
by inspecting the live firewall-start script on the deployed host.

Add the rule explicitly via firewall.extraCommands targeting nixos-nat-post,
scoped to LAN source traffic (vars.lanCidr) going out tailscale0.
extraStopCommands removes it on firewall stop.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-26 09:54:33 +10:00

beszel

Fix beszel-agent losing its hub-pairing fingerprint on every restart

2026-07-20 15:59:24 +10:00

boot

Resolve all statix and nixpkgs-fmt warnings repo-wide

2026-07-20 03:47:42 +10:00

build-types

fix(tailscale-router): actually insert MASQUERADE rule via extraCommands

2026-07-26 09:54:33 +10:00

clan

feat(provision): Phase 2 — migrate SSH host keys to clan vars