networking.nat: replace network-interfaces.target
We can replace this safely with network-pre because iptables does not care whether the interfaces exist or not.
This commit is contained in:
parent
60430b140c
commit
8524df1259
@ -171,7 +171,7 @@ in
|
|||||||
systemd.services = mkIf (!config.networking.firewall.enable) { nat = {
|
systemd.services = mkIf (!config.networking.firewall.enable) { nat = {
|
||||||
description = "Network Address Translation";
|
description = "Network Address Translation";
|
||||||
wantedBy = [ "network.target" ];
|
wantedBy = [ "network.target" ];
|
||||||
after = [ "network-interfaces.target" "systemd-modules-load.service" ];
|
after = [ "network-pre.target" "systemd-modules-load.service" ];
|
||||||
path = [ pkgs.iptables ];
|
path = [ pkgs.iptables ];
|
||||||
unitConfig.ConditionCapability = "CAP_NET_ADMIN";
|
unitConfig.ConditionCapability = "CAP_NET_ADMIN";
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user