Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

hack nordvpnd to work with yggdrasil

This commit is contained in:
Aminda Suomalainen 2024-03-29 07:58:44 +02:00
parent 9fb90d4b30
commit 1d05061bb4
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q
3 changed files with 14 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
etc/sudoers.d/nordvpnd
View File

@ -2,3 +2,6 @@
%nordvpn ALL=NOPASSWD: /bin/systemctl stop nordvpnd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl start nordvpnd.service
%nordvpn ALL=NOPASSWD: /bin/systemctl restart nordvpnd.service
# used in my scripts and nordvpn.service.d and yggdrasil.service.d to ensure
# it works
%nordvpn ALL=NOPASSWD: /bin/systemctl restart yggdrasil.service

4
etc/systemd/system/nordvpnd.service.d/yggdrasil.conf Normal file
View File

@ -0,0 +1,4 @@
# nordvpnd disables IPv6 which Yggdrasil depends on, so let's restart it.
# Note ../yggdrasil.service.d/ enabling IPv6 for all interfaces.
[Service]
ExecStartPost=systemctl restart yggdrasil.service --quiet

7
etc/systemd/system/yggdrasil.service.d/nordvpnd.conf Normal file
View File

@ -0,0 +1,7 @@
# nordvpnd disables IPv6 for all interfaces and thus breaks Yggdrasil. This
# override gives yggdrasil.service two chances to ensure IPv6 is enabled.
[Service]
ExecStartPre=sysctl net.ipv6.conf.all.disable_ipv6=0
ExecStartPost=sysctl net.ipv6.conf.all.disable_ipv6=0
# I cannot use this as the interface won't exist until Yggdrasil starts
#ExecStartPost=sysctl net.ipv6.conf.yggdrasil.disable_ipv6=0