From 52c6a60404ce6c4bc06cddf18e855f759f80b293 Mon Sep 17 00:00:00 2001
From: emmatherock <emanuelxoda@gmail.com>
Date: Tue, 1 Sep 2026 15:43:17 -0300
Subject: [PATCH] feat(vps): enable IP forwarding for exit node support

Required so the host can route traffic as a Tailscale/Headscale exit node.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 hosts/vps/default.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosts/vps/default.nix b/hosts/vps/default.nix
index 985065b..579b866 100644
--- a/hosts/vps/default.nix
+++ b/hosts/vps/default.nix
@@ -71,6 +71,12 @@
   boot.loader.systemd-boot.configurationLimit = 10;
   boot.loader.efi.canTouchEfiVariables = true;
 
+  # Required for this host to act as a Tailscale/Headscale exit node.
+  boot.kernel.sysctl = {
+    "net.ipv4.ip_forward" = 1;
+    "net.ipv6.conf.all.forwarding" = 1;
+  };
+
   time.timeZone = "America/Argentina/Buenos_Aires";
   i18n.defaultLocale = "en_US.UTF-8";