From 78659eeb198d5633ef8b277c316058058b303eea Mon Sep 17 00:00:00 2001
From: Mikael Voss <mvs@nyantec.com>
Date: Sun, 1 Sep 2024 20:16:49 +0200
Subject: [PATCH] linux: Enable network address translation support

---
 package/linux-hardened/config.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/package/linux-hardened/config.nix b/package/linux-hardened/config.nix
index df2f63a..01fd3ad 100644
--- a/package/linux-hardened/config.nix
+++ b/package/linux-hardened/config.nix
@@ -474,12 +474,14 @@
     NF_LOG_SYSLOG = true;
 
     NF_CONNTRACK = true;
+    NF_NAT = true;
     NF_TABLES = true;
     NF_TABLES_INET = true;
     NFT_CT = true;
     NFT_CONNLIMIT = true;
     NFT_LIMIT = true;
     NFT_LOG = true;
+    NFT_NAT = true;
     NFT_REJECT = true;
     NFT_FIB_INET = true;
     NF_TABLES_IPV4 = true;