{ ... }: { networking = { interfaces."enp0s31f6".ipv4.addresses = [{ address = "10.2.0.1"; prefixLength = 8; }]; defaultGateway = { address = "10.1.0.1"; interface = "enp0s31f6"; }; vlans.internal = { id=100; interface="enp0s31f6"; }; interfaces.internal.ipv4.addresses = [{ address = "11.0.0.1"; prefixLength = 8; }]; nftables.tables.forwarding = { family = "inet"; content = '' chain incoming { type nat hook prerouting priority dstnat; policy accept; tcp dport 2211 dnat ip to 11.0.0.100:22 comment "Tower SSH" tcp dport 2222 dnat ip to 11.0.0.2:22 comment "Kitty SSH" tcp dport 2233 dnat ip to 10.2.0.101:22 comment "Intuos SSH" udp dport { 27005, 27015 } dnat ip to 11.0.0.100 comment "PC Hosted Games" tcp dport { 48010, 47989, 47984 } dnat ip to 11.0.0.100 comment "PC Sunshine TCP" udp dport { 47998, 47999, 48000 } dnat ip to 11.0.0.100 comment "PC Sunshine UDP" } chain forward { type nat hook postrouting priority 100; policy accept; masquerade } ''; }; }; # Enable IP forwarding for the server configuration boot.kernel.sysctl."net.ipv4.ip_forward" = 1; }