37 lines
780 B
Nix
37 lines
780 B
Nix
{ config, pkgs, ... }:
|
|
|
|
{
|
|
environment.systemPackages = with pkgs; [
|
|
docker-compose
|
|
docker-credential-helpers
|
|
docker-ls
|
|
];
|
|
|
|
virtualisation = {
|
|
docker = {
|
|
enable = true;
|
|
logDriver = "journald";
|
|
extraOptions = builtins.concatStringsSep " " [
|
|
"--ipv6"
|
|
"--fixed-cidr-v6=fd00:d0ce:d0ce:d0ce::/64"
|
|
];
|
|
};
|
|
|
|
oci-containers.containers.ipv6nat = {
|
|
image = "robbertkl/ipv6nat";
|
|
volumes = [
|
|
"/var/run/docker.sock:/var/run/docker.sock:ro"
|
|
];
|
|
extraOptions = [
|
|
"--network=host"
|
|
"--cap-drop=ALL"
|
|
"--cap-add=NET_ADMIN"
|
|
"--cap-add=NET_RAW"
|
|
"--cap-add=SYS_MODULE"
|
|
];
|
|
};
|
|
};
|
|
|
|
environment.etc."modules-load.d/ipv6nat.conf".text = "ip6_tables\n";
|
|
}
|