diff options
| author | Vineet Kumar <git@vineetk.net> | 2026-05-23 15:28:25 -0400 |
|---|---|---|
| committer | Vineet Kumar <git@vineetk.net> | 2026-05-23 15:29:34 -0400 |
| commit | fa5d8d6299e85645f387bf4b7d9d80620fa76ade (patch) | |
| tree | 77b4efbaf87edb0cb568b496cda3d676d6780a1f | |
| parent | bc5ebc90da177412705b8bfcccc1ab5f39795730 (diff) | |
demiurge: fix wg1 and nginx not starting on boot
| -rw-r--r-- | epistemia/systems/demiurge.scm | 9 |
1 files changed, 7 insertions, 2 deletions
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm index 617d001..8ad7337 100644 --- a/epistemia/systems/demiurge.scm +++ b/epistemia/systems/demiurge.scm | |||
| @@ -225,7 +225,9 @@ | |||
| 225 | (bootstrap-private-key? #f) | 225 | (bootstrap-private-key? #f) |
| 226 | (private-key "/run/secrets/wg1_demiurge") | 226 | (private-key "/run/secrets/wg1_demiurge") |
| 227 | (table #f) | 227 | (table #f) |
| 228 | (shepherd-requirement '(age-secret)) | 228 | (shepherd-requirement '(age-secret |
| 229 | ;; to prevent iptables lock issues | ||
| 230 | wireguard-wg0)) | ||
| 229 | (pre-up '("while [ ! -f /run/secrets/wg1_demiurge ]; do sleep 1; done")) | 231 | (pre-up '("while [ ! -f /run/secrets/wg1_demiurge ]; do sleep 1; done")) |
| 230 | (post-up | 232 | (post-up |
| 231 | ;; IPv4 and IPv6 NAT | 233 | ;; IPv4 and IPv6 NAT |
| @@ -357,5 +359,8 @@ | |||
| 357 | (settings | 359 | (settings |
| 358 | (append | 360 | (append |
| 359 | '(("net.ipv4.ip_forward" . "1") | 361 | '(("net.ipv4.ip_forward" . "1") |
| 360 | ("net.ipv6.conf.all.forwarding" . "1")) | 362 | ("net.ipv6.conf.all.forwarding" . "1") |
| 363 | ;; for nginx since shepherd-requirement cannot be set | ||
| 364 | ("net.ipv4.ip_nonlocal_bind" . "1") | ||
| 365 | ("net.ipv6.ip_nonlocal_bind" . "1")) | ||
| 361 | %default-sysctl-settings))))))) | 366 | %default-sysctl-settings))))))) |