Merge pull request #32258 from ryantrinkle/add-nat-extraCommands
nat: add extraCommands option
This commit is contained in:
commit
f1a6fa6eec
|
@ -19,6 +19,8 @@ let
|
||||||
iptables -w -t nat -D POSTROUTING -j nixos-nat-post 2>/dev/null || true
|
iptables -w -t nat -D POSTROUTING -j nixos-nat-post 2>/dev/null || true
|
||||||
iptables -w -t nat -F nixos-nat-post 2>/dev/null || true
|
iptables -w -t nat -F nixos-nat-post 2>/dev/null || true
|
||||||
iptables -w -t nat -X nixos-nat-post 2>/dev/null || true
|
iptables -w -t nat -X nixos-nat-post 2>/dev/null || true
|
||||||
|
|
||||||
|
${cfg.extraStopCommands}
|
||||||
'';
|
'';
|
||||||
|
|
||||||
setupNat = ''
|
setupNat = ''
|
||||||
|
@ -59,6 +61,8 @@ let
|
||||||
--to-destination ${cfg.dmzHost}
|
--to-destination ${cfg.dmzHost}
|
||||||
''}
|
''}
|
||||||
|
|
||||||
|
${cfg.extraCommands}
|
||||||
|
|
||||||
# Append our chains to the nat tables
|
# Append our chains to the nat tables
|
||||||
iptables -w -t nat -A PREROUTING -j nixos-nat-pre
|
iptables -w -t nat -A PREROUTING -j nixos-nat-pre
|
||||||
iptables -w -t nat -A POSTROUTING -j nixos-nat-post
|
iptables -w -t nat -A POSTROUTING -j nixos-nat-post
|
||||||
|
@ -170,6 +174,28 @@ in
|
||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
|
|
||||||
|
networking.nat.extraCommands = mkOption {
|
||||||
|
type = types.lines;
|
||||||
|
default = "";
|
||||||
|
example = "iptables -A INPUT -p icmp -j ACCEPT";
|
||||||
|
description =
|
||||||
|
''
|
||||||
|
Additional shell commands executed as part of the nat
|
||||||
|
initialisation script.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
|
networking.nat.extraStopCommands = mkOption {
|
||||||
|
type = types.lines;
|
||||||
|
default = "";
|
||||||
|
example = "iptables -D INPUT -p icmp -j ACCEPT || true";
|
||||||
|
description =
|
||||||
|
''
|
||||||
|
Additional shell commands executed as part of the nat
|
||||||
|
teardown script.
|
||||||
|
'';
|
||||||
|
};
|
||||||
|
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue