router: add v6only sub-role Currently disabled due to issues with accessing v4 only hosts
1 file changed, 38 insertions(+), 0 deletions(-)
changed files
A system/roles/router/v6only.nix
@@ -0,0 +1,38 @@ +let + nat64 = true; + + # TODO: change to 30 + v6OnlyPreferredLifetime = 15 * 60; + + prefix = "64:ff9b::/96"; +in +{ + services.adguardhome.settings.dns = { + use_dns64 = nat64; + }; + + services.dnsmasq.settings.dhcp-option = [ + "option:ipv6-only,${toString v6OnlyPreferredLifetime}" + ]; + + networking.jool = { + enable = nat64; + nat64 = { + default = { + global.pool6 = prefix; + }; + }; + }; + + systemd.network.networks = { + "60-bridge-pref64" = { + matchConfig.Kind = "bridge"; + + ipv6PREF64Prefixes = [ + { + Prefix = prefix; + } + ]; + }; + }; +}