From ffcd5c93d2258e6d719bbd9077332b36267ca6b9 Mon Sep 17 00:00:00 2001
From: Cilly Leang <mini@cilly.moe>
Date: Mon, 16 Mar 2026 16:18:41 +1100
Subject: [PATCH] containers/citrine: enable nat

---
 containers/citrine/flake.nix | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/containers/citrine/flake.nix b/containers/citrine/flake.nix
index 72ff573..5f6c381 100644
--- a/containers/citrine/flake.nix
+++ b/containers/citrine/flake.nix
@@ -18,6 +18,12 @@
       name = "citrine";
       subnet = "3";
     in {
+      networking.nat = {
+        enable = true;
+        enableIPv6 = true;
+        internalInterfaces = [ "ve-${name}" ];
+      };
+
       services.nginx.virtualHosts."garden.lava.moe" = {
         useACMEHost = "lava.moe";
         forceSSL = true;