summaryrefslogtreecommitdiffstats
path: root/roles/gateway
diff options
context:
space:
mode:
authorAhmed Abdelhalim <[email protected]>2026-07-08 03:32:42 +0200
committerAhmed Abdelhalim <[email protected]>2026-07-08 03:32:42 +0200
commite06dc8a7b62ad3029503914602401d5f235ce442 (patch)
tree26ce42e8a55971dc5bbf11ba25a1984014f4f65f /roles/gateway
parentbb0abab8308256c028c29e3732e53ef211cad613 (diff)
Refactor network role
Remove static IPv6 support from network role — all hosts use SLAAC (method=auto). Simplifies NM templates, argument_specs, and resolved.conf. gateway sysctl accept_ra=2 is now unconditional when gateway_enabled. Co-authored-by: Claude.ai
Diffstat (limited to 'roles/gateway')
-rw-r--r--roles/gateway/templates/99-gateway.conf.j24
1 files changed, 1 insertions, 3 deletions
diff --git a/roles/gateway/templates/99-gateway.conf.j2 b/roles/gateway/templates/99-gateway.conf.j2
index 54f81f0c..b0f99dd4 100644
--- a/roles/gateway/templates/99-gateway.conf.j2
+++ b/roles/gateway/templates/99-gateway.conf.j2
@@ -1,10 +1,8 @@
{% if gateway_enabled %}
net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1
+net.ipv6.conf.{{ gateway_router_interface }}.accept_ra=2
{% else %}
net.ipv4.ip_forward=0
net.ipv6.conf.all.forwarding=0
{% endif %}
-{% if network_ipv6_address is defined %}
-net.ipv6.conf.{{ gateway_router_interface }}.accept_ra={{ 2 if gateway_enabled else 1 }}
-{% endif %}