networking.nat: replace network-interfaces.target

We can replace this safely with network-pre because iptables does not
care whether the interfaces exist or not.
This commit is contained in:
Alexander Ried 2016-09-09 01:22:44 +02:00
parent 60430b140c
commit 8524df1259

View file

@ -171,7 +171,7 @@ in
systemd.services = mkIf (!config.networking.firewall.enable) { nat = {
description = "Network Address Translation";
wantedBy = [ "network.target" ];
after = [ "network-interfaces.target" "systemd-modules-load.service" ];
after = [ "network-pre.target" "systemd-modules-load.service" ];
path = [ pkgs.iptables ];
unitConfig.ConditionCapability = "CAP_NET_ADMIN";