diff options
| author | Mel <mel@rnrd.eu> | 2026-08-22 19:24:37 +0200 |
|---|---|---|
| committer | Mel <mel@rnrd.eu> | 2026-08-22 19:24:37 +0200 |
| commit | 3a067ac9de39ac4151ff9f1be3e48c766a07a26b (patch) | |
| tree | 19aa443f5d2dba509177d07c28a444042620431d /machines/corsac | |
| parent | 7db149d4dab404f70eceabd0d671bdb16e4f0cf8 (diff) | |
| download | network-3a067ac9de39ac4151ff9f1be3e48c766a07a26b.tar.zst network-3a067ac9de39ac4151ff9f1be3e48c766a07a26b.zip | |
Disable IPv6 privacy extensions on corsac
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'machines/corsac')
| -rw-r--r-- | machines/corsac/devices.nix | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/machines/corsac/devices.nix b/machines/corsac/devices.nix index 971983b..271d38a 100644 --- a/machines/corsac/devices.nix +++ b/machines/corsac/devices.nix @@ -3,7 +3,7 @@ { # boot settings boot = { - loader = { + loader = { systemd-boot.enable = true; efi.canTouchEfiVariables = true; }; @@ -14,6 +14,13 @@ systemd.network.networks."20-wired" = { name = "enp1s0"; DHCP = "yes"; + + networkConfig = { + # do not use privacy ipv6 addresses, which + # make global ipv6 address recognition harder + # for public machines. + IPv6PrivacyExtensions = false; + }; }; fileSystems = { |