nixos/openvpn: support setting IP forwarding

NixOS · Jun 21, 2019 · 5655968 · 5655968
1 parent 282041f
commit 5655968
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/nixos/modules/services/networking/openvpn.nix b/nixos/modules/services/networking/openvpn.nix
@@ -78,6 +78,14 @@ in
 
   options = {
 
+    services.openvpn.enableForwarding = mkOption {
+      default = false;
+      type = types.bool;
+      description = ''
+        Set up IP forwarding on the host.
+      '';
+      };
+
     services.openvpn.servers = mkOption {
       default = {};
 
@@ -211,6 +219,8 @@ in
 
     boot.kernelModules = [ "tun" ];
 
+    boot.kernel.sysctl = lib.mkIf cfg.enableForwarding { "net.ipv4.ip_forward" = true; };
+
   };
 
 }