nixos

Archived

This repository has been archived on 2026-07-30. You can view files and clone it. You cannot open issues or pull requests or push a commit.

Files

T

History

beatzaplentyandClaude Sonnet 4.6 781b1d324e

Check NixOS configurations / eval-hosts (pull_request) Successful in 10m34s

Details

fix(tailscale-router): actually insert MASQUERADE rule via extraCommands

networking.nat.externalInterface without internalInterfaces creates the
nixos-nat-post chain but inserts no MASQUERADE rule into it — confirmed
by inspecting the live firewall-start script on the deployed host.

Add the rule explicitly via firewall.extraCommands targeting nixos-nat-post,
scoped to LAN source traffic (vars.lanCidr) going out tailscale0.
extraStopCommands removes it on firewall stop.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-07-26 09:54:33 +10:00

docker.nix

Expand variables.nix: NFS shares, ports, image size, GC/rotation, Pi host

2026-07-20 08:27:37 +10:00

gui.nix

added jq and direnv

2026-07-23 06:59:00 +10:00

minimal.nix

Expand variables.nix: NFS shares, ports, image size, GC/rotation, Pi host

2026-07-20 08:27:37 +10:00

nix-cache.nix

Refactor flake targets into platform x build-type matrix