Prevent accidental use of nftables

Reviewed-by: Aleix Boné <abonerib@bsc.es>
2025-07-11 16:12:44 +02:00 · 2025-07-11 16:12:44 +02:00 · ce2cda1c41
commit ce2cda1c41
parent e6aef2cbd0
1 changed files with 4 additions and 1 deletions
--- a/m/common/base/net.nix
+++ b/m/common/base/net.nix
@ -1,4 +1,4 @@
-{ pkgs, ... }:
+{ pkgs, lib, ... }:

 {
  networking = {
@ -10,6 +10,9 @@
      allowedTCPPorts = [ 22 ];
    };

+    # Make sure we use iptables
+    nftables.enable = lib.mkForce false;
+
    hosts = {
      "84.88.53.236" = [ "apex" "ssfhead.bsc.es" "ssfhead" ];
      "84.88.51.152" = [ "raccoon" ];