From e6acf8911722f8794eb449bf051af5ffbb693786 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Wed, 15 Nov 2023 11:04:03 +0100
Subject: [PATCH] clanCore/networking: allow ping unconditionally

---
 nixosModules/clanCore/networking.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/nixosModules/clanCore/networking.nix b/nixosModules/clanCore/networking.nix
index 4df14d270..d2c5dacbc 100644
--- a/nixosModules/clanCore/networking.nix
+++ b/nixosModules/clanCore/networking.nix
@@ -22,6 +22,9 @@
     # conflicts with systemd-resolved
     networking.useHostResolvConf = false;
 
+    # Allow PMTU / DHCP
+    networking.firewall.allowPing = true;
+
     # The notion of "online" is a broken concept
     # https://github.com/systemd/systemd/blob/e1b45a756f71deac8c1aa9a008bd0dab47f64777/NEWS#L13
     systemd.services.NetworkManager-wait-online.enable = false;