2 with (import networking/names-and-numbers.nix);
6 networking/ethernet.nix
9 networking/nftables.nix
10 ../../nixos/profiles/dnscrypt-proxy2.nix
11 ../../nixos/profiles/wireguard/wg-intra.nix
13 install.substituteOnDestination = false;
14 networking.domain = "wg";
15 networking.useDHCP = false;
17 boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
18 networking.nftables.ruleset = lib.mkAfter ''
20 chain forward-to-net {
21 #jump forward-connectivity
24 chain forward-from-net {
25 ct state { established, related } accept
26 log level warn prefix "forward-from-net: " counter drop
29 log level warn prefix "forward: " counter drop
34 services.avahi.enable = true;
35 services.avahi.openFirewall = true;
36 services.avahi.publish.enable = true;
37 services.dnscrypt-proxy2.settings.listen_addresses = [
42 networking.wireguard.wg-intra.peers = {
44 losurdo.enable = true;