extern/nix-config
1
0
Fork 1
mirror of https://github.com/donovanglover/nix-config.git synced 2025-06-05 01:06:43 +02:00
Code Issues Packages Projects Releases Wiki Activity

phone: Add mullvad support by disabling checkReversePath

Browse Source 
`networking.firewall.checkReversePath` was being set to "loose" from
Mullvad VPN, which was causing an issue with the kernel used by the
PinePhone with Mobile NixOS.

By changing this option to `false`, we get rid of the "This kernel does
not support rpfilter" error, which seems to be inaccurate due to the
result of `sysctl -a | grep \\.rp_filter` on the phone being consistent
with the result on the laptop.
This commit is contained in:
Donovan Glover 2024-06-21 19:12:01 -04:00
parent e030aa9687
commit 31ab36fe78
No known key found for this signature in database
GPG Key ID: EA7408A77AE1BE65
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/phone/configuration.nix
View File

@ -27,6 +27,10 @@ in
phone = true; phone = true;
sensor = true; sensor = true;
}; };
system = {
mullvad = true;
};
}; };
environment = { environment = {

3
modules/system.nix
View File

@ -227,6 +227,8 @@ in
allowedTCPPorts = mkIf allowDevPort [ allowedTCPPorts = mkIf allowDevPort [
3000 3000
]; ];
checkReversePath = mkIf phone (lib.mkForce false);
}; };
}; };
@ -236,6 +238,7 @@ in
mullvad-vpn = mkIf mullvad { mullvad-vpn = mkIf mullvad {
enable = true; enable = true;
enableExcludeWrapper = false; enableExcludeWrapper = false;
package = pkgs.mullvad-vpn;
}; };
postgresql = mkIf postgres { postgresql = mkIf postgres {