11:26 <flokli> I tend to avoid the whole nat and firewall situation on NixOS exposed by the module system. IMHO, it should be refactored

11:45 <aranea> Yeah, I actually consider the fact that the nftables module doesn't respect the firewall.* options an advantage.

12:00 <flokli> aranea: don't rely on it staying that way ;-)

12:00 <aranea> haha

12:00 <flokli> :thisisfine:

12:02 <aranea> Well, even if that changes, I'd hope that explicitly setting networking.nftables.ruleset would still override everything else.

15:22 <flokli> hehe

16:53 <aleph-> flokli: What're the issues with the nat and firewall modules?

16:54 <flokli> they don't work with networkd networking most of the time, for example.

16:55 <aleph-> Ah. Never actually used networkd.