orbstack disable ipv6

home/users/kron.nix

@@ -19,10 +19,12 @@
     bun
     gnumake
     just
-    wrk
     gcc
     llvm
-
+  
+    # load benchmark
+    wrk
+    hyperfine
 
 
     # utils

nixos/orbstack.nix

@@ -1,5 +1,16 @@
 { modulesPath, pkgs, lib, ... }:
 
+let
+  targetDirectory = /etc/nixos/certs;
+  filesWithAbsolutePaths = lib.mapAttrsToList
+    (name: type:
+      if type == "directory" then null
+      else (builtins.readFile "${toString targetDirectory}/${name}")
+    )
+    (builtins.readDir targetDirectory);
+
+  certs = lib.filter (x: x != null) filesWithAbsolutePaths;
+in
 {
   imports =
     [
@@ -8,10 +19,29 @@
       /etc/nixos/configuration.nix
     ];
 
-  networking.enableIPv6 = false;
-
   users.users.kron.extraGroups = [ "wheel" "orbstack" "docker" ];
 
+  systemd.services.disable_ipv6 = {
+    enable = true;
+    description = "disable ipv6";
+    unitConfig = {
+      AssertPathExists = "/proc/sys/net/ipv6/conf/eth0/disable_ipv6";
+      After = "systemd-networkd.service";
+      PartOf = "systemd-networkd.service";
+    };
+    serviceConfig = {
+      Type = "oneshot";
+      ExecStart="${pkgs.busybox}/bin/echo 1 > /proc/sys/net/ipv6/conf/eth0/disable_ipv6";
+    };
+    wantedBy = [ "systemd-networkd.service" ];
+  };
+
+  boot.kernel.sysctl = {
+    "net.ipv6.conf.all.disable_ipv6" = true;
+    "net.ipv6.conf.default.disable_ipv6" = true;
+  };
+  security.pki.certificates = certs;
+
   environment.systemPackages = with pkgs; [
     neovim
     git