nixos-conf/services/nat64.nix

{ ... }:
{
  networking.jool = {
    enable = true;
    nat64.default = {
      global.pool6 = "64:ff9b::/96"; # Default value made explicit for clarity

      # Port forwarding
      bib = [
        {
          # ExoPlaSim WireGuard
          "protocol" = "UDP";
          "ipv4 address" = "192.168.1.1#51821";
          "ipv6 address" = "fd08:d473:bcca:0:699b:fcbf:f142:225c#51821";
        }
      ];

      pool4 = [
        # Port ranges for dynamic translation
        {
          protocol = "TCP";
          prefix = "192.168.1.1/32";
          "port range" = "30001-50000";
        }
        {
          protocol = "UDP";
          prefix = "192.168.1.1/32";
          "port range" = "30001-50000";
        }
        {
          protocol = "ICMP";
          prefix = "192.168.1.1/32";
          "port range" = "30001-50000";
        }

        # Ports for static BIB entries
        {
          protocol = "UDP";
          prefix = "192.168.1.1/32";
          "port range" = "51821";
        }
      ];
    };
  };
}