From dd78a149303b96857aa74bbfd359dec322f63794 Mon Sep 17 00:00:00 2001
From: Mel <mel@rnrd.eu>
Date: Fri, 3 Oct 2025 17:59:39 +0200
Subject: Make IPv6 forwarding sysctl options in service network configuration
 'default'

Signed-off-by: Mel <mel@rnrd.eu>
---
 modules/foundation/services/networks.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

(limited to 'modules')

diff --git a/modules/foundation/services/networks.nix b/modules/foundation/services/networks.nix
index ed2bf9e..7205ec1 100644
--- a/modules/foundation/services/networks.nix
+++ b/modules/foundation/services/networks.nix
@@ -10,6 +10,7 @@ let
 
   inherit (lib)
     mkOption
+    mkDefault
     types
     assertMsg
     optional
@@ -192,9 +193,10 @@ in
       fixed-cidr-v6 = "${cfg.defaultIPv6SubnetPrefix}:255::/${toString cfg.defaultIPv6SubnetLength}";
     };
 
+    # turn these ipv6 forwarding on, if it isn't already.
     boot.kernel.sysctl = {
-      "net.ipv6.conf.all.forwarding" = 1;
-      "net.ipv6.conf.default.forwarding" = 1;
+      "net.ipv6.conf.all.forwarding" = lib.mkDefault 1;
+      "net.ipv6.conf.default.forwarding" = lib.mkDefault 1;
     };
 
     networking.firewall = {
-- 
cgit 1.4.1