23 lines
437 B
Nix
23 lines
437 B
Nix
{
|
|
networking = {
|
|
networkmanager = {
|
|
enable = true;
|
|
|
|
# Randomize MAC for every ethernet connetion
|
|
ethernet.macAddress = "random";
|
|
connectionConfig = {
|
|
# IPv6 Privacy Extensions
|
|
"ipv6.ip6-privacy" = 2;
|
|
|
|
# unique DUID per connection
|
|
"ipv6.dhcp-duid" = "stable-uuid";
|
|
};
|
|
};
|
|
|
|
firewall = {
|
|
enable = true;
|
|
trustedInterfaces = ["tailscale0"];
|
|
};
|
|
};
|
|
}
|