feat(nixos/kanata): add blocky

1 files changed, 18 insertions, 0 deletions

diff --git a/nixos/kanata/configuration.nix b/nixos/kanata/configuration.nix
index aac02f5..6bde8a6 100644
--- a/nixos/kanata/configuration.nix
+++ b/nixos/kanata/configuration.nix
@@ -94,6 +94,24 @@ in
   powerManagement.cpuFreqGovernor = "ondemand";
 
   sops.secrets.zfs-smol-key = { };
+  # sops.secrets.nextcloud-admin-pass = { };
+
+  boot.kernel.sysctl."net.ipv4.ip_forward" = 1;
+  boot.kernel.sysctl."net.ipv6.conf.all.forwarding" = 1;
+
+  networking.firewall.enable = true;
+
+  networking.nat = {
+    enable = true;
+    internalInterfaces = [ "ve-+" ];
+    externalInterface = "enp3s0";
+    # Lazy IPv6 connectivity for the container
+    enableIPv6 = true;
+  };
+
+  modules = {
+    services.blocky.enable = true;
+  };
 
   # This option defines the first version of NixOS you have installed on this particular machine,
   # and is used to maintain compatibility with application data (e.g. databases) created on older NixOS versions.