-{ pkgs, lib, ... }:
+{ pkgs, lib, config, ... }:
{
imports = [
../../nixos/profiles/dnscrypt-proxy2.nix
networking.nftables.ruleset = lib.mkAfter ''
table inet filter {
chain input {
+ ip daddr 10.0.0.0/8 counter goto input-lan
+ ip daddr 172.16.0.0/12 counter goto input-lan
+ ip daddr 192.168.0.0/16 counter goto input-lan
+ ip daddr 224.0.0.0/3 counter goto input-lan
goto input-net
}
chain output {