summaryrefslogtreecommitdiffstats
path: root/roles/gateway
diff options
context:
space:
mode:
authorAhmed AbdelHalim <[email protected]>2026-07-08 03:32:42 +0200
committerAhmed AbdelHalim <[email protected]>2026-07-08 03:32:42 +0200
commit222cafd9672354da0347e28afaf004fa8cef96b8 (patch)
tree26ce42e8a55971dc5bbf11ba25a1984014f4f65f /roles/gateway
parentdb1d359a33d2871b57ca850c8943cc123d24e1f5 (diff)
Refactor network role
Remove static IPv6 support from network role — all hosts use SLAAC (method=auto). Simplifies NM templates, argument_specs, and resolved.conf. gateway sysctl accept_ra=2 is now unconditional when gateway_enabled. Co-authored-by: Claude.ai
Diffstat (limited to 'roles/gateway')
-rw-r--r--roles/gateway/templates/99-gateway.conf.j24
1 files changed, 1 insertions, 3 deletions
diff --git a/roles/gateway/templates/99-gateway.conf.j2 b/roles/gateway/templates/99-gateway.conf.j2
index 54f81f0c..b0f99dd4 100644
--- a/roles/gateway/templates/99-gateway.conf.j2
+++ b/roles/gateway/templates/99-gateway.conf.j2
@@ -1,10 +1,8 @@
{% if gateway_enabled %}
net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1
+net.ipv6.conf.{{ gateway_router_interface }}.accept_ra=2
{% else %}
net.ipv4.ip_forward=0
net.ipv6.conf.all.forwarding=0
{% endif %}
-{% if network_ipv6_address is defined %}
-net.ipv6.conf.{{ gateway_router_interface }}.accept_ra={{ 2 if gateway_enabled else 1 }}
-{% endif %}