commit fa5d8d6299e85645f387bf4b7d9d80620fa76ade parent bc5ebc90da177412705b8bfcccc1ab5f39795730 Author: Vineet Kumar <git@vineetk.net> Date: Sat, 23 May 2026 15:28:25 -0400 demiurge: fix wg1 and nginx not starting on boot Diffstat:
| M | epistemia/systems/demiurge.scm | | | 9 | +++++++-- |
1 file changed, 7 insertions(+), 2 deletions(-)
diff --git a/epistemia/systems/demiurge.scm b/epistemia/systems/demiurge.scm @@ -225,7 +225,9 @@ (bootstrap-private-key? #f) (private-key "/run/secrets/wg1_demiurge") (table #f) - (shepherd-requirement '(age-secret)) + (shepherd-requirement '(age-secret + ;; to prevent iptables lock issues + wireguard-wg0)) (pre-up '("while [ ! -f /run/secrets/wg1_demiurge ]; do sleep 1; done")) (post-up ;; IPv4 and IPv6 NAT @@ -357,5 +359,8 @@ (settings (append '(("net.ipv4.ip_forward" . "1") - ("net.ipv6.conf.all.forwarding" . "1")) + ("net.ipv6.conf.all.forwarding" . "1") + ;; for nginx since shepherd-requirement cannot be set + ("net.ipv4.ip_nonlocal_bind" . "1") + ("net.ipv6.ip_nonlocal_bind" . "1")) %default-sysctl-settings)))))))