qenya/nixfiles
1
0
Fork 0
Code Issues 5 Pull requests Actions Activity

elucredassa: Restrict WireGuard's MTU to fit through 6in4 tunnel

Browse source 
Includes a workaround for https://github.com/NixOS/nixpkgs/issues/375960
This commit is contained in:
Katherina Walshe-Grey 2025-01-23 14:24:39 +00:00
parent 6c3a225666
commit 07c49c3d37
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
hosts/elucredassa/networking.nix
View file

@ -19,6 +19,7 @@
Name = "sit-he-ipv6"; Name = "sit-he-ipv6";
Kind = "sit"; Kind = "sit";
Description = "Hurricane Electric IPv6 Tunnel"; Description = "Hurricane Electric IPv6 Tunnel";
MTUBytes = 1480;
}; };
tunnelConfig = { tunnelConfig = {
@ -38,4 +39,10 @@
privateKeyFile = "/etc/wireguard/privatekey"; privateKeyFile = "/etc/wireguard/privatekey";
persistentKeepalive = 29; persistentKeepalive = 29;
}; };
# restricted to fit within the 6in4 tunnel
systemd.network.netdevs."30-birdsong".netdevConfig.MTUBytes = 1280;
# these two lines work around this bug: https://github.com/NixOS/nixpkgs/issues/375960
systemd.network.netdevs."30-birdsong".netdevConfig.Kind = "wireguard";
systemd.network.netdevs."30-birdsong".netdevConfig.Name = "wg-birdsong";
} }