From 653f7b4fb09e685e2b470e6a7e4fb4cda46d2c21 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vili=20Sinerv=C3=A4?= <vili.m.sinerva@gmail.com>
Date: Thu, 20 Feb 2025 21:07:46 +0200
Subject: [PATCH] Switch IPv6 to EUI-64 + privacy addresses

---
 base.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/base.nix b/base.nix
index 96712f7..54e40dc 100644
--- a/base.nix
+++ b/base.nix
@@ -164,8 +164,13 @@
 
   networking = {
     # Easiest to use and most distros use this by default.
-    networkmanager.enable = true;
-    tempAddresses = "disabled";
+    networkmanager = {
+      enable = true;
+      # Use EUI-64 addresses by default, so that addresses are predictable
+      settings."connection"."ipv6.addr-gen-mode" = 0;
+    };
+    # IPv6 privacy addresses for outgoing traffic
+    tempAddresses = "default";
   };
 
   users.mutableUsers = false; # Force all user management to happen throught nix-files