In reply to @janne.hess:helsinki-systems.de
Our interface is 0% compatible because we… I honestly don't remember anymore. It's a lot more complex, the code is a lot less readable but it's more powerful. So it's not really a drop-in replacement

In reply to @andi:kack.it
das_j: do you have the code somewhere public? I'd love to host a proper search for options and packages on search.nixos.dev ;-)

In reply to @eyjhb:eyjhb.dk
das_j: You need to sign in or sign up before continuing. aww :( https://git.helsinki.tools/helsinki-systems/helsinki/-/blob/master/3modules/firewall.nix

In reply to @eyjhb:eyjhb.dk

  verifiedNetfilter = { text, modules ? [ ] }:
    let
      file = pkgs.writeText "netfilter" text;
      vmTools = pkgs.vmTools.override {
        rootModules =
          [
            "virtio_pci"
            "virtio_mmio"
            "virtio_blk"
            "virtio_balloon"
            "virtio_rng"
            "ext4"
            "unix"
            "9p"
            "9pnet_virtio"
            "crc32c_generic"
          ] ++ modules;
      };

      check = vmTools.runInLinuxVM (
        pkgs.runCommand "nft-check"
          {
            buildInputs = [ pkgs.nftables ];
            inherit file;
          } ''
          set -ex
          # make sure protocols & services are known
          ln -s ${pkgs.iana-etc}/etc/protocol /etc/protocol
          ln -s ${pkgs.iana-etc}/etc/services /etc/services
          # test the configuration
          nft --file $file
          set +x
        ''
      );
    in
    "#checked with ${check}\n" + text;

this beauty

In reply to @zhaofeng:zhaofeng.li
Well, here's yet another project that has abandoned the 0ver.org versioning scheme 😄

In reply to @zhaofeng:zhaofeng.li
Well, here's yet another project that has abandoned the 0ver.org versioning scheme 😄

In reply to @matthewcroughan:defenestrate.it
I just set up a 6in4 tunnel on my router at home which is running openwrt. Is there perhaps a daemon I can run on NixOS on my laptop that will give me an ipv6 address anywhere? Would be cool if so.

In reply to @matthewcroughan:defenestrate.it
so I'm happy with the setup I have at home where the router does it, but I was wondering whether I could have it all happen on my laptop and screw the network I'm on.